ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash fb2c0697c6d9a96a5411dd2952947458
79e57f831ec396bbdaa5bfe9472a05e6c9fb31f4
3fd7edcc349ab4402f62e54a142be6b4cecf0e7ee3f431d3168bdf0643ba4d92
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6319
Cache-Control: max-age=164359
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 14:37:17 GMT
Etag: "638c76f5-1d7"
Expires: Tue, 06 Dec 2022 12:16:36 GMT
Last-Modified: Sun, 04 Dec 2022 10:31:17 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash cfec3d7283a9b66d2be426ce54d210f3
808c1feb1ba918951d1928c1f6bfc0c253262774
1bad6c06aa3e88dcbc125fc98a6cb753eb2b18d2c8dd61da21d12209aeeda3f9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1BAD6C06AA3E88DCBC125FC98A6CB753EB2B18D2C8DD61DA21D12209AEEDA3F9"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17963
Expires: Sun, 04 Dec 2022 19:36:40 GMT
Date: Sun, 04 Dec 2022 14:37:17 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 1ea206ac3c440825741687351f8c6e4e
2f38dafd8c43dcce2411a0590bc5c02cd6286735
7d7232c8c91bcd18161ba2c9d23e3bff159604e058bd5b3fc1c7fcbcd03a7ee3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7D7232C8C91BCD18161BA2C9D23E3BFF159604E058BD5B3FC1C7FCBCD03A7EE3"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4885
Expires: Sun, 04 Dec 2022 15:58:42 GMT
Date: Sun, 04 Dec 2022 14:37:17 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
34.102.187.140200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 34.102.187.140:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 14cd9a0afb6ba9a763651d5112760d1e
75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Retry-After, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sun, 04 Dec 2022 14:20:07 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 1030
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: BvXeh6lOQLrIWBevc/RpyMagNcVE1CvjxzuvTOFaqddZMxx6w1Htfi5v9IgMjzO1IFeDNVg4T20=
x-amz-request-id: XTV8XAP8ZFY709EY
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sun, 04 Dec 2022 13:47:00 GMT
age: 3017
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 04 Dec 2022 14:37:17 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 122124f83967c12700f5a6f5546b0f1f
d7acd2db61ad811c388a44b7bd407fa5f4aea8ee
b6b9e0b6c241b4eeb5161b1c297dec2aa6188032017074ee7f8e5533fab87a4d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 14:37:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 122124f83967c12700f5a6f5546b0f1f
d7acd2db61ad811c388a44b7bd407fa5f4aea8ee
b6b9e0b6c241b4eeb5161b1c297dec2aa6188032017074ee7f8e5533fab87a4d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 14:37:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ministeriodapalavra.com/
162.241.55.185200 OK 157 kB IP 162.241.55.185:0
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (4341), with CRLF line terminators
Size 157 kB (156893 bytes)
Hash 6c87db48789fce5c2f939daaa91cb804
47858979bcaef3b332b72e4fad9d397fe1644aad
f42baf3eb649eed079de8ec927f914a188fb6cdff0df4695ceb239f175823508
Analyzer Verdict Alert openphish Intesa Sanpaolo
fortinet Phishing
GET / HTTP/1.1
Host: ministeriodapalavra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 14:37:13 GMT
Server: Apache
Last-Modified: Mon, 08 Mar 2021 22:11:04 GMT
Accept-Ranges: bytes
Content-Length: 156893
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html
ministeriodapalavra.com/isp_files/sdk_002.js
162.241.55.185200 OK 3.2 kB URL HTTP/1.1 ministeriodapalavra.com/isp_files/sdk_002.js
IP 162.241.55.185:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (2088)
Hash bc697bf53c033a21f5670105b9fc0842
93e12816528d5f0feecf9a019e7eb2a26abad564
ab6b6865ba2c3888981b41c30d41735681e600b16a34699fad409ffd6eb12078
Analyzer Verdict Alert openphish Intesa Sanpaolo
fortinet Phishing
GET /isp_files/sdk_002.js HTTP/1.1
Host: ministeriodapalavra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ministeriodapalavra.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 14:37:13 GMT
Server: Apache
Last-Modified: Wed, 24 Feb 2021 16:51:34 GMT
Accept-Ranges: bytes
Content-Length: 3224
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/javascript
ministeriodapalavra.com/isp_files/api.js
162.241.55.185200 OK 674 B URL HTTP/1.1 ministeriodapalavra.com/isp_files/api.js
IP 162.241.55.185:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (674), with no line terminators
Hash 4bc3dd132aa2b7e82e78479484abe6aa
e23b083749fbe865efd9999315e846a6c8803746
ae6ff79046f9ee8c299dabd799c885729b480ed1df8fcda01e62f5b74892d9b8
Analyzer Verdict Alert openphish Intesa Sanpaolo
fortinet Phishing
GET /isp_files/api.js HTTP/1.1
Host: ministeriodapalavra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ministeriodapalavra.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 14:37:13 GMT
Server: Apache
Last-Modified: Wed, 24 Feb 2021 16:51:04 GMT
Accept-Ranges: bytes
Content-Length: 674
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: application/javascript
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
34.102.187.140200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 34.102.187.140:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Last-Modified, Retry-After, Cache-Control, Content-Type, Pragma, Backoff, ETag, Expires, Content-Length, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sun, 04 Dec 2022 14:11:19 GMT
cache-control: public,max-age=3600
age: 1559
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
ministeriodapalavra.com/isp_files/ArchIbPublicStyle.css
162.241.55.185200 OK 44 kB URL HTTP/1.1 ministeriodapalavra.com/isp_files/ArchIbPublicStyle.css
IP 162.241.55.185:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (27521)
Hash 3dbe7e25b9051a2ab8d08f41ffd98754
8cda61ce70b89492ad5df3981a12afc7741a4d27
0c673c1d2bc8dbd0abb1ce0d910906b41d17846678a2eb770bf865c789f9a356
Analyzer Verdict Alert openphish Intesa Sanpaolo
GET /isp_files/ArchIbPublicStyle.css HTTP/1.1
Host: ministeriodapalavra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ministeriodapalavra.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 14:37:13 GMT
Server: Apache
Last-Modified: Wed, 24 Feb 2021 16:51:06 GMT
Accept-Ranges: bytes
Content-Length: 43830
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/css
ministeriodapalavra.com/isp_files/discoveryWidget.js
162.241.55.185200 OK 16 kB URL HTTP/1.1 ministeriodapalavra.com/isp_files/discoveryWidget.js
IP 162.241.55.185:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (15888), with CRLF line terminators
Hash 98f3ce8855120abd52146f742b9b5a35
092f4bf69a38b272e609ebf0486fe383f8d5751e
e5c4b9bbc3470a97062e6eff4169bce458fb1d82a4811b8f7768bba0edebc32c
Analyzer Verdict Alert openphish Intesa Sanpaolo
fortinet Phishing
GET /isp_files/discoveryWidget.js HTTP/1.1
Host: ministeriodapalavra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ministeriodapalavra.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 14:37:13 GMT
Server: Apache
Last-Modified: Wed, 24 Feb 2021 16:51:14 GMT
Accept-Ranges: bytes
Content-Length: 15904
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/javascript
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 31b129c94a90b1e695b21395cb54e378
a3cae46b48d469cc61ab0581303bcd5f5b654db9
fac3f681be358a20f78958dff10c89b7a91365c5114c81246c1bc34c1362ba1e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6305
Cache-Control: max-age=159278
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 14:37:18 GMT
Etag: "638c632b-1d7"
Expires: Tue, 06 Dec 2022 10:51:56 GMT
Last-Modified: Sun, 04 Dec 2022 09:06:51 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 471
ministeriodapalavra.com/isp_files/header_nav_custom.css
162.241.55.185200 OK 71 B URL HTTP/1.1 ministeriodapalavra.com/isp_files/header_nav_custom.css
IP 162.241.55.185:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with CRLF line terminators
Hash 09608b44bddff764bb0fe2954543a43e
554aa647fad1d0bc68c9b219fd294a62a22147b2
7c83a5042661ba10f25eca2c45b676001414d0e8f6c8c946d1af716cfeb8c179
Analyzer Verdict Alert openphish Intesa Sanpaolo
GET /isp_files/header_nav_custom.css HTTP/1.1
Host: ministeriodapalavra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ministeriodapalavra.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 14:37:13 GMT
Server: Apache
Last-Modified: Wed, 24 Feb 2021 16:51:16 GMT
Accept-Ranges: bytes
Content-Length: 71
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: text/css
ministeriodapalavra.com/isp_files/utag_002.js
162.241.55.185200 OK 21 kB URL HTTP/1.1 ministeriodapalavra.com/isp_files/utag_002.js
IP 162.241.55.185:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (1199)
Hash 3dd078bf88c8a29f0187c502f6eca9ad
1b9e78a02419339209ee05bbca5309a5cef9426f
d30e51231eb4b7942d6ebb9818f0bd5d87edeb6edbbe2747da50b5e216163ea2
Analyzer Verdict Alert openphish Intesa Sanpaolo
fortinet Phishing
GET /isp_files/utag_002.js HTTP/1.1
Host: ministeriodapalavra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ministeriodapalavra.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 14:37:13 GMT
Server: Apache
Last-Modified: Wed, 24 Feb 2021 16:51:36 GMT
Accept-Ranges: bytes
Content-Length: 20702
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: application/javascript
ministeriodapalavra.com/isp_files/utag.js
162.241.55.185200 OK 11 kB URL HTTP/1.1 ministeriodapalavra.com/isp_files/utag.js
IP 162.241.55.185:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (3388)
Hash a48ba4cdd367d5f313d3167def1a8462
1f8e8dec2295cf83857cd95d11ef4d61773b8356
c10f6a6cc98ef215e7443ef9c08c6d10b8bcd128239f8a3eea5074ce1a49cefc
Analyzer Verdict Alert openphish Intesa Sanpaolo
fortinet Phishing
GET /isp_files/utag.js HTTP/1.1
Host: ministeriodapalavra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ministeriodapalavra.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 14:37:13 GMT
Server: Apache
Last-Modified: Wed, 24 Feb 2021 16:51:36 GMT
Accept-Ranges: bytes
Content-Length: 10859
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: application/javascript
ministeriodapalavra.com/isp_files/utag_004.js
162.241.55.185200 OK 2 B URL HTTP/1.1 ministeriodapalavra.com/isp_files/utag_004.js
IP 162.241.55.185:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with no line terminators
Hash 7bc0ee636b3b83484fc3b9348863bd22
ebbffb7d7ea5362a22bfa1bab0bfdeb1617cd610
a2c2339691fc48fbd14fb307292dff3e21222712d9240810742d7df0c6d74dfb
Analyzer Verdict Alert openphish Intesa Sanpaolo
fortinet Phishing
GET /isp_files/utag_004.js HTTP/1.1
Host: ministeriodapalavra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ministeriodapalavra.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 14:37:13 GMT
Server: Apache
Last-Modified: Wed, 24 Feb 2021 16:51:38 GMT
Accept-Ranges: bytes
Content-Length: 2
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: application/javascript
ministeriodapalavra.com/isp_files/sdk.js
162.241.55.185200 OK 406 kB URL HTTP/1.1 ministeriodapalavra.com/isp_files/sdk.js
IP 162.241.55.185:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (20829)
Size 406 kB (406063 bytes)
Hash 4a3bd8e9e7cdf0d9b390b1ad13e0b85f
fa7107ae0da816318df0f037fbc1e636557a68d4
ad6bb25d70674ba7c154c5eae4f015bbffe8383ba4f7fbdd13622b54bc10d4d2
Analyzer Verdict Alert openphish Intesa Sanpaolo
fortinet Phishing
GET /isp_files/sdk.js HTTP/1.1
Host: ministeriodapalavra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ministeriodapalavra.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 14:37:13 GMT
Server: Apache
Last-Modified: Wed, 24 Feb 2021 16:51:34 GMT
Accept-Ranges: bytes
Content-Length: 406063
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/javascript
ministeriodapalavra.com/isp_files/utag_003.js
162.241.55.185200 OK 244 kB URL HTTP/1.1 ministeriodapalavra.com/isp_files/utag_003.js
IP 162.241.55.185:0
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document, Unicode text, UTF-8 text, with very long lines (21130)
Size 244 kB (244418 bytes)
Hash 81288a49fc4779957e14d6e3e06bb0c6
3efb59bb83493b13648231a5062615ec1131459b
5abe1239a83f6ed6774767da29948d27e2037f0e4bee82186e87d12ebb1098d6
Analyzer Verdict Alert openphish Intesa Sanpaolo
fortinet Phishing
GET /isp_files/utag_003.js HTTP/1.1
Host: ministeriodapalavra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ministeriodapalavra.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 14:37:13 GMT
Server: Apache
Last-Modified: Wed, 24 Feb 2021 16:51:38 GMT
Accept-Ranges: bytes
Content-Length: 244418
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/javascript
push.services.mozilla.com/
54.188.211.138101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 54.188.211.138:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: tFLMzVs9siRmL14tMUP3RQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: /A/cAICPVchydgIcPdPQ98VklZ8=
ministeriodapalavra.com/isp_files/main_app_002.js
162.241.55.185200 OK 201 B URL HTTP/1.1 ministeriodapalavra.com/isp_files/main_app_002.js
IP 162.241.55.185:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with no line terminators
Hash 84680e01729a872a53819a80dbf8c957
d56d3b312199a64f75d9fcc57d1cabf0d8f16203
dd66a709149afea4e1768fe76db0d311493ad2bbe0923a00054f629007c72acf
Analyzer Verdict Alert openphish Intesa Sanpaolo
fortinet Phishing
GET /isp_files/main_app_002.js HTTP/1.1
Host: ministeriodapalavra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ministeriodapalavra.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 14:37:14 GMT
Server: Apache
Last-Modified: Wed, 24 Feb 2021 16:51:32 GMT
Accept-Ranges: bytes
Content-Length: 201
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: application/javascript
ministeriodapalavra.com/isp_files/ArchIncludeIframeAPI.js
162.241.55.185200 OK 4.7 kB URL HTTP/1.1 ministeriodapalavra.com/isp_files/ArchIncludeIframeAPI.js
IP 162.241.55.185:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (4674), with no line terminators
Hash 838a1989b43119400295c00dcad17d9f
7b9b74480f65ae265f5e762a25b785f6c37b6a84
b24fe7a67a96fd8b386d8e29afea450f2ab78e103ccf4cc7b9ea620677c508b3
Analyzer Verdict Alert openphish Intesa Sanpaolo
fortinet Phishing
GET /isp_files/ArchIncludeIframeAPI.js HTTP/1.1
Host: ministeriodapalavra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ministeriodapalavra.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 14:37:14 GMT
Server: Apache
Last-Modified: Wed, 24 Feb 2021 16:51:06 GMT
Accept-Ranges: bytes
Content-Length: 4674
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: application/javascript
ministeriodapalavra.com/isp_files/main_app.js
162.241.55.185200 OK 490 B URL HTTP/1.1 ministeriodapalavra.com/isp_files/main_app.js
IP 162.241.55.185:0
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document, ASCII text
Hash 7f07678f4fa247a72894229c9917b639
5b416b97aa322588247ab0cb2b8ee3e278883c01
4fd0de73550fca10a98c7c3a7b5d65088010000e24e27579628a4459bac78d8b
Analyzer Verdict Alert openphish Intesa Sanpaolo
fortinet Phishing
GET /isp_files/main_app.js HTTP/1.1
Host: ministeriodapalavra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ministeriodapalavra.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 14:37:14 GMT
Server: Apache
Last-Modified: Wed, 24 Feb 2021 16:51:32 GMT
Accept-Ranges: bytes
Content-Length: 490
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: application/javascript
ministeriodapalavra.com/isp_files/clientlib-all.css
162.241.55.185200 OK 668 kB URL HTTP/1.1 ministeriodapalavra.com/isp_files/clientlib-all.css
IP 162.241.55.185:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (65011)
Size 668 kB (667696 bytes)
Hash c933694b855d1fe61ff244c866c5b83e
656231bda562288f3c8b053c472da8ef669366c1
3b9bd0c07914c564bf67dd5e289b20d20e67b778bfa9d1925d0494dc7e632794
Analyzer Verdict Alert openphish Intesa Sanpaolo
GET /isp_files/clientlib-all.css HTTP/1.1
Host: ministeriodapalavra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ministeriodapalavra.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 14:37:13 GMT
Server: Apache
Last-Modified: Wed, 24 Feb 2021 16:51:08 GMT
Accept-Ranges: bytes
Content-Length: 667696
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash e471e4415d227aa6441e48d6543b2f5d
5d31fde87a692fcde1747dfeec56d42caa2338e9
691eac9590299d938d2b2722a1a3ca784a1f2d7b49b2982f372c3becdcb631ca
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5725
Cache-Control: max-age=147902
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 14:37:19 GMT
Etag: "638c3900-1d7"
Expires: Tue, 06 Dec 2022 07:42:21 GMT
Last-Modified: Sun, 04 Dec 2022 06:06:56 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 471
ministeriodapalavra.com/isp_files/uuidv4.js
162.241.55.185200 OK 1.6 kB URL HTTP/1.1 ministeriodapalavra.com/isp_files/uuidv4.js
IP 162.241.55.185:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (1572), with no line terminators
Hash 8b0797783cd7ac096d2267fcf0ed0ef6
7e841f83fc686dfe5d541d6aa92fb3c9fc9ea29e
1dbc1e1c54246ef4aff5221b75d0f0694461538d5400a1c163757e559d94f3e1
Analyzer Verdict Alert openphish Intesa Sanpaolo
fortinet Phishing
GET /isp_files/uuidv4.js HTTP/1.1
Host: ministeriodapalavra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ministeriodapalavra.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 14:37:14 GMT
Server: Apache
Last-Modified: Wed, 24 Feb 2021 16:51:38 GMT
Accept-Ranges: bytes
Content-Length: 1572
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: application/javascript
ministeriodapalavra.com/isp_files/clientlib-libs.js
162.241.55.185200 OK 780 kB URL HTTP/1.1 ministeriodapalavra.com/isp_files/clientlib-libs.js
IP 162.241.55.185:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (32038)
Size 780 kB (780468 bytes)
Hash 1e5899a4c7cb61c8722df2bae8b82dfb
6951f9933abb593f96756d84c9a9db2ad8118713
f0869548a917956002fcdc0d4cfeca40bb5b6f22d8f667a94269432ca80fff53
Analyzer Verdict Alert openphish Intesa Sanpaolo
fortinet Phishing
GET /isp_files/clientlib-libs.js HTTP/1.1
Host: ministeriodapalavra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ministeriodapalavra.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 14:37:14 GMT
Server: Apache
Last-Modified: Wed, 24 Feb 2021 16:51:10 GMT
Accept-Ranges: bytes
Content-Length: 780468
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: application/javascript
ministeriodapalavra.com/isp_files/uuidv5.js
162.241.55.185200 OK 3.0 kB URL HTTP/1.1 ministeriodapalavra.com/isp_files/uuidv5.js
IP 162.241.55.185:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (2965), with no line terminators
Hash c0fba2054679856d46d0fb4291928ed5
dccbf59e2702673add0d4c45b14930c6cea47b5b
a5dad0e06b6af36abee07b65fcd67fec18265aff300760d7b2a64246010b7e3f
Analyzer Verdict Alert openphish Intesa Sanpaolo
fortinet Phishing
GET /isp_files/uuidv5.js HTTP/1.1
Host: ministeriodapalavra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ministeriodapalavra.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 14:37:14 GMT
Server: Apache
Last-Modified: Wed, 24 Feb 2021 16:51:38 GMT
Accept-Ranges: bytes
Content-Length: 2965
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: application/javascript
ministeriodapalavra.com/isp_files/uaparser.js
162.241.55.185200 OK 11 kB URL HTTP/1.1 ministeriodapalavra.com/isp_files/uaparser.js
IP 162.241.55.185:0
ASN #46606 UNIFIEDLAYER-AS-1
File type Unicode text, UTF-8 text, with very long lines (11153)
Hash 9ae64cb71df02622d9e68f3c62f194ec
7856b4fba1add89b2dc40215779929c01d8674c3
0f88bbea2203fd1c324df67d391cfc5cd76dbc93e22b9cc4bd6cc3fa42013bd0
Analyzer Verdict Alert openphish Intesa Sanpaolo
fortinet Phishing
GET /isp_files/uaparser.js HTTP/1.1
Host: ministeriodapalavra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ministeriodapalavra.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 14:37:14 GMT
Server: Apache
Last-Modified: Wed, 24 Feb 2021 16:51:36 GMT
Accept-Ranges: bytes
Content-Length: 11380
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: application/javascript
ministeriodapalavra.com/isp_files/archbridge.js
162.241.55.185200 OK 3.9 kB URL HTTP/1.1 ministeriodapalavra.com/isp_files/archbridge.js
IP 162.241.55.185:0
ASN #46606 UNIFIEDLAYER-AS-1
Hash 28fcb532e546c7a0be165032e0f1c3d5
8bbcc2be49d08085c11483a42487ec5f968f33f1
e878ac287c1086263e562b59d5aa021fc9d3fe9bdbeb481efaf53ecbdb7f6999
Analyzer Verdict Alert openphish Intesa Sanpaolo
fortinet Phishing
GET /isp_files/archbridge.js HTTP/1.1
Host: ministeriodapalavra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ministeriodapalavra.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 14:37:14 GMT
Server: Apache
Last-Modified: Wed, 24 Feb 2021 16:51:06 GMT
Accept-Ranges: bytes
Content-Length: 3915
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: application/javascript
ministeriodapalavra.com/isp_files/main_app_003.js
162.241.55.185200 OK 2.1 kB URL HTTP/1.1 ministeriodapalavra.com/isp_files/main_app_003.js
IP 162.241.55.185:0
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document, ASCII text
Hash 0a7101fab9bc51c48a067f1775cee0ae
ad04d04750acee8e7d0b581a647d419be2a984a8
9abd6c846350530120370c05a4ea9c2271977e62469d5ee489c1b6c6863ba5a0
Analyzer Verdict Alert openphish Intesa Sanpaolo
fortinet Phishing
GET /isp_files/main_app_003.js HTTP/1.1
Host: ministeriodapalavra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ministeriodapalavra.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 14:37:14 GMT
Server: Apache
Last-Modified: Wed, 24 Feb 2021 16:51:32 GMT
Accept-Ranges: bytes
Content-Length: 2142
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: application/javascript
ministeriodapalavra.com/isp_files/app.css
162.241.55.185200 OK 118 kB URL HTTP/1.1 ministeriodapalavra.com/isp_files/app.css
IP 162.241.55.185:0
ASN #46606 UNIFIEDLAYER-AS-1
File type Unicode text, UTF-8 text, with very long lines (65530), with no line terminators
Size 118 kB (118180 bytes)
Hash 85db1cc2fc07a0c57f74e7fef296d95c
6e74c38e221f69228edefb151b543ab470ad122a
7df959e8197010775f1d16b9812b983975e39351d7960fc96e17c57f759dad8d
Analyzer Verdict Alert openphish Intesa Sanpaolo
GET /isp_files/app.css HTTP/1.1
Host: ministeriodapalavra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ministeriodapalavra.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 14:37:14 GMT
Server: Apache
Last-Modified: Wed, 24 Feb 2021 16:51:04 GMT
Accept-Ranges: bytes
Content-Length: 118180
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: text/css
ministeriodapalavra.com/ib/public/login/login820e.html?language=it&theme=dark&id=ifrmAccessHead
162.241.55.185200 OK 19 kB URL HTTP/1.1 ministeriodapalavra.com/ib/public/login/login820e.html?language=it&theme=dark&id=ifrmAccessHead
IP 162.241.55.185:0
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- assembler source, ASCII text, with very long lines (5405)
Hash adec7129663ef616a9075b0dde44350e
d155704fab981ace91c2329592fff8595f263fcd
68f99278dfb6d0ec9cd0087d2e8f22bff0ccd2b02e3fca72d56f81438d70dc55
Analyzer Verdict Alert openphish Intesa Sanpaolo
GET /ib/public/login/login820e.html?language=it&theme=dark&id=ifrmAccessHead HTTP/1.1
Host: ministeriodapalavra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ministeriodapalavra.com/
Cookie: utag_main=v_id:0184dd91e375008399069d4897e000050002000900918$_sn:1$_ss:1$_pn:1%3Bexp-session$_st:1670166436533$ses_id:1670164636533%3Bexp-session$vapi_domain:ministeriodapalavra.com; AMCV_761F7500590204020A495ED3%40AdobeOrg=1585540135%7CMCIDTS%7C19331%7CvVersion%7C4.4.0
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 14:37:14 GMT
Server: Apache
Last-Modified: Thu, 25 Feb 2021 00:43:38 GMT
Accept-Ranges: bytes
Content-Length: 18837
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: text/html
dpm.demdex.net/id/rd?d_visid_ver=4.4.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_verify=1&d_orgid=761F7500590204020A495ED3%40AdobeOrg&d_nsid=0&ts=1670164636544
52.211.247.227200 OK 124 B URL HTTP/1.1 dpm.demdex.net/id/rd?d_visid_ver=4.4.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_verify=1&d_orgid=761F7500590204020A495ED3%40AdobeOrg&d_nsid=0&ts=1670164636544
IP 52.211.247.227:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 1f6783349ac4177ec3b3845fd520dca6
d84e7a43a8c8ff6f1a568ad6cb4162767f5b32b7
64bc30aa6a9d9e5396bb67c6af32c31f5ca6610641f0bdea10d759281df6adca
GET /id/rd?d_visid_ver=4.4.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_verify=1&d_orgid=761F7500590204020A495ED3%40AdobeOrg&d_nsid=0&ts=1670164636544 HTTP/1.1
Host: dpm.demdex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://ministeriodapalavra.com
Content-Type: application/x-www-form-urlencoded
Referer: https://ministeriodapalavra.com/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://ministeriodapalavra.com
Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private
content-encoding: gzip
Content-Type: application/json;charset=utf-8
DCS: dcs-prod-irl1-2-v045-0a4852727.edge-irl1.demdex.com 0 ms
Expires: Thu, 01 Jan 1970 00:00:00 UTC
P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT"
Pragma: no-cache
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin
X-Error: 172
X-TID: mRGI+WYmRR0=
Content-Length: 124
Connection: keep-alive
ministeriodapalavra.com/step1.html
162.241.55.185200 OK 11 kB URL HTTP/1.1 ministeriodapalavra.com/step1.html
IP 162.241.55.185:0
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (5302), with CRLF line terminators
Hash 21edbe10a5ee1b444b922efc7c433df3
3fcc6c9190d60f9464d2ff1c17d38f4c5b66e7e1
e6ecaf6612f84f085f586ede0570df52f3356b3357a48f9e26f56720937a6274
Analyzer Verdict Alert openphish Intesa Sanpaolo
fortinet Phishing
GET /step1.html HTTP/1.1
Host: ministeriodapalavra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ministeriodapalavra.com/
Cookie: utag_main=v_id:0184dd91e375008399069d4897e000050002000900918$_sn:1$_ss:1$_pn:1%3Bexp-session$_st:1670166436533$ses_id:1670164636533%3Bexp-session$vapi_domain:ministeriodapalavra.com; AMCV_761F7500590204020A495ED3%40AdobeOrg=1585540135%7CMCIDTS%7C19331%7CvVersion%7C4.4.0
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 14:37:14 GMT
Server: Apache
Last-Modified: Thu, 11 Mar 2021 23:27:08 GMT
Accept-Ranges: bytes
Content-Length: 10848
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: text/html
ministeriodapalavra.com/isp_files/vendor.js
162.241.55.185200 OK 264 kB URL HTTP/1.1 ministeriodapalavra.com/isp_files/vendor.js
IP 162.241.55.185:0
ASN #46606 UNIFIEDLAYER-AS-1
File type Unicode text, UTF-8 text, with very long lines (32028)
Size 264 kB (264065 bytes)
Hash ad24b0fbd7b4df0682ecc464acfbbe7e
d503bbad3bfaf50dff7b1c82bd566d1debf3a947
af6248aa655d83e53c137c252328635b1d0227dc2ba983810d898c025617c0b8
Analyzer Verdict Alert openphish Intesa Sanpaolo
fortinet Phishing
GET /isp_files/vendor.js HTTP/1.1
Host: ministeriodapalavra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ministeriodapalavra.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 14:37:14 GMT
Server: Apache
Last-Modified: Wed, 24 Feb 2021 16:51:40 GMT
Accept-Ranges: bytes
Content-Length: 264065
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: application/javascript
ministeriodapalavra.com/isp_files/flag_eng.png
162.241.55.185200 OK 1.5 kB URL HTTP/1.1 ministeriodapalavra.com/isp_files/flag_eng.png
IP 162.241.55.185:0
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 19 x 10, 8-bit/color RGB, non-interlaced\012- data
Hash 3aadce088b74fd250abcdb82d51ba273
1e9f10dbc5fcd6c98a94659c0344907e0b7b59d6
b9cf5ac56dd524668e1156759674215a9224dcaec961914e0e36c2c0efcb9bc0
Analyzer Verdict Alert openphish Intesa Sanpaolo
GET /isp_files/flag_eng.png HTTP/1.1
Host: ministeriodapalavra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ministeriodapalavra.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 14:37:14 GMT
Server: Apache
Last-Modified: Wed, 24 Feb 2021 16:51:14 GMT
Accept-Ranges: bytes
Content-Length: 1502
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive
Content-Type: image/png
ministeriodapalavra.com/isp_files/clientlib-site/css/fonts/OpenSans-Regular7abf-2.html?2r5i7k
162.241.55.185200 OK 19 kB URL HTTP/1.1 ministeriodapalavra.com/isp_files/clientlib-site/css/fonts/OpenSans-Regular7abf-2.html?2r5i7k
IP 162.241.55.185:0
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- assembler source, ASCII text, with very long lines (5405)
Hash adec7129663ef616a9075b0dde44350e
d155704fab981ace91c2329592fff8595f263fcd
68f99278dfb6d0ec9cd0087d2e8f22bff0ccd2b02e3fca72d56f81438d70dc55
GET /isp_files/clientlib-site/css/fonts/OpenSans-Regular7abf-2.html?2r5i7k HTTP/1.1
Host: ministeriodapalavra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ministeriodapalavra.com/isp_files/clientlib-all.css
Cookie: utag_main=v_id:0184dd91e375008399069d4897e000050002000900918$_sn:1$_ss:1$_pn:1%3Bexp-session$_st:1670166436533$ses_id:1670164636533%3Bexp-session$vapi_domain:ministeriodapalavra.com; AMCV_761F7500590204020A495ED3%40AdobeOrg=1585540135%7CMCIDTS%7C19331%7CvVersion%7C4.4.0
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 14:37:14 GMT
Server: Apache
Last-Modified: Thu, 25 Feb 2021 00:43:40 GMT
Accept-Ranges: bytes
Content-Length: 18837
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: text/html
ministeriodapalavra.com/isp_files/app.js
162.241.55.185200 OK 409 kB URL HTTP/1.1 ministeriodapalavra.com/isp_files/app.js
IP 162.241.55.185:0
ASN #46606 UNIFIEDLAYER-AS-1
File type Unicode text, UTF-8 text, with very long lines (32075)
Size 409 kB (408631 bytes)
Hash 22ddd550e90139633328bc20fa6d1f0b
21778989f9941dc7cd24024248db2256f46f8842
f23d095624c60c55ca1c04d193cebb7a627cedf5d2996a8177f603809e529e8c
Analyzer Verdict Alert openphish Intesa Sanpaolo
fortinet Phishing
GET /isp_files/app.js HTTP/1.1
Host: ministeriodapalavra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ministeriodapalavra.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 14:37:14 GMT
Server: Apache
Last-Modified: Wed, 24 Feb 2021 16:51:06 GMT
Accept-Ranges: bytes
Content-Length: 408631
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: application/javascript
ministeriodapalavra.com/fonts/ispfont-2.html
162.241.55.185200 OK 19 kB URL HTTP/1.1 ministeriodapalavra.com/fonts/ispfont-2.html
IP 162.241.55.185:0
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- assembler source, ASCII text, with very long lines (5405)
Hash adec7129663ef616a9075b0dde44350e
d155704fab981ace91c2329592fff8595f263fcd
68f99278dfb6d0ec9cd0087d2e8f22bff0ccd2b02e3fca72d56f81438d70dc55
Analyzer Verdict Alert openphish Intesa Sanpaolo
fortinet Phishing
GET /fonts/ispfont-2.html HTTP/1.1
Host: ministeriodapalavra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://ministeriodapalavra.com/isp_files/ArchIbPublicStyle.css
Cookie: utag_main=v_id:0184dd91e375008399069d4897e000050002000900918$_sn:1$_ss:1$_pn:1%3Bexp-session$_st:1670166436533$ses_id:1670164636533%3Bexp-session$vapi_domain:ministeriodapalavra.com; AMCV_761F7500590204020A495ED3%40AdobeOrg=1585540135%7CMCIDTS%7C19331%7CvVersion%7C4.4.0
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 14:37:14 GMT
Server: Apache
Last-Modified: Thu, 25 Feb 2021 00:43:40 GMT
Accept-Ranges: bytes
Content-Length: 18837
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: text/html
ministeriodapalavra.com/isp_files/clientlib-site/css/images/li-menu-active.html
162.241.55.185200 OK 19 kB URL HTTP/1.1 ministeriodapalavra.com/isp_files/clientlib-site/css/images/li-menu-active.html
IP 162.241.55.185:0
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- assembler source, ASCII text, with very long lines (5405)
Hash adec7129663ef616a9075b0dde44350e
d155704fab981ace91c2329592fff8595f263fcd
68f99278dfb6d0ec9cd0087d2e8f22bff0ccd2b02e3fca72d56f81438d70dc55
Analyzer Verdict Alert openphish Intesa Sanpaolo
fortinet Phishing
GET /isp_files/clientlib-site/css/images/li-menu-active.html HTTP/1.1
Host: ministeriodapalavra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ministeriodapalavra.com/isp_files/clientlib-all.css
Cookie: utag_main=v_id:0184dd91e375008399069d4897e000050002000900918$_sn:1$_ss:1$_pn:1%3Bexp-session$_st:1670166436533$ses_id:1670164636533%3Bexp-session$vapi_domain:ministeriodapalavra.com; AMCV_761F7500590204020A495ED3%40AdobeOrg=1585540135%7CMCIDTS%7C19331%7CvVersion%7C4.4.0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 14:37:14 GMT
Server: Apache
Last-Modified: Thu, 25 Feb 2021 00:43:40 GMT
Accept-Ranges: bytes
Content-Length: 18837
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: text/html
ministeriodapalavra.com/isp_files/clientlib-site/css/images/sf-navigation.html
162.241.55.185200 OK 19 kB URL HTTP/1.1 ministeriodapalavra.com/isp_files/clientlib-site/css/images/sf-navigation.html
IP 162.241.55.185:0
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- assembler source, ASCII text, with very long lines (5405)
Hash adec7129663ef616a9075b0dde44350e
d155704fab981ace91c2329592fff8595f263fcd
68f99278dfb6d0ec9cd0087d2e8f22bff0ccd2b02e3fca72d56f81438d70dc55
Analyzer Verdict Alert openphish Intesa Sanpaolo
fortinet Phishing
GET /isp_files/clientlib-site/css/images/sf-navigation.html HTTP/1.1
Host: ministeriodapalavra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ministeriodapalavra.com/isp_files/clientlib-all.css
Cookie: utag_main=v_id:0184dd91e375008399069d4897e000050002000900918$_sn:1$_ss:1$_pn:1%3Bexp-session$_st:1670166436533$ses_id:1670164636533%3Bexp-session$vapi_domain:ministeriodapalavra.com; AMCV_761F7500590204020A495ED3%40AdobeOrg=1585540135%7CMCIDTS%7C19331%7CvVersion%7C4.4.0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 14:37:14 GMT
Server: Apache
Last-Modified: Thu, 25 Feb 2021 00:43:40 GMT
Accept-Ranges: bytes
Content-Length: 18837
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: text/html
ministeriodapalavra.com/isp_files/clientlib-site/css/images/ico-search.html
162.241.55.185200 OK 19 kB URL HTTP/1.1 ministeriodapalavra.com/isp_files/clientlib-site/css/images/ico-search.html
IP 162.241.55.185:0
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- assembler source, ASCII text, with very long lines (5405)
Hash adec7129663ef616a9075b0dde44350e
d155704fab981ace91c2329592fff8595f263fcd
68f99278dfb6d0ec9cd0087d2e8f22bff0ccd2b02e3fca72d56f81438d70dc55
Analyzer Verdict Alert openphish Intesa Sanpaolo
fortinet Phishing
GET /isp_files/clientlib-site/css/images/ico-search.html HTTP/1.1
Host: ministeriodapalavra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ministeriodapalavra.com/isp_files/clientlib-all.css
Cookie: utag_main=v_id:0184dd91e375008399069d4897e000050002000900918$_sn:1$_ss:1$_pn:1%3Bexp-session$_st:1670166436533$ses_id:1670164636533%3Bexp-session$vapi_domain:ministeriodapalavra.com; AMCV_761F7500590204020A495ED3%40AdobeOrg=1585540135%7CMCIDTS%7C19331%7CvVersion%7C4.4.0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 14:37:14 GMT
Server: Apache
Last-Modified: Thu, 25 Feb 2021 00:43:40 GMT
Accept-Ranges: bytes
Content-Length: 18837
Keep-Alive: timeout=5, max=92
Connection: Keep-Alive
Content-Type: text/html
ministeriodapalavra.com/ib/public/login/js/arch/services/ArchIncludeIframeAPI.js?v=1.1.11
162.241.55.185404 Not Found 315 B URL HTTP/1.1 ministeriodapalavra.com/ib/public/login/js/arch/services/ArchIncludeIframeAPI.js?v=1.1.11
IP 162.241.55.185:0
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
GET /ib/public/login/js/arch/services/ArchIncludeIframeAPI.js?v=1.1.11 HTTP/1.1
Host: ministeriodapalavra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ministeriodapalavra.com/
Cookie: utag_main=v_id:0184dd91e375008399069d4897e000050002000900918$_sn:1$_ss:1$_pn:1%3Bexp-session$_st:1670166436533$ses_id:1670164636533%3Bexp-session$vapi_domain:ministeriodapalavra.com; AMCV_761F7500590204020A495ED3%40AdobeOrg=1585540135%7CMCIDTS%7C19331%7CvVersion%7C4.4.0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 404 Not Found
Date: Sun, 04 Dec 2022 14:37:14 GMT
Server: Apache
Content-Length: 315
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
ministeriodapalavra.com/ib/public/vetrina/libs/uuid/uuidv4.min.js
162.241.55.185404 Not Found 315 B URL HTTP/1.1 ministeriodapalavra.com/ib/public/vetrina/libs/uuid/uuidv4.min.js
IP 162.241.55.185:0
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
Analyzer Verdict Alert openphish Intesa Sanpaolo
fortinet Phishing
GET /ib/public/vetrina/libs/uuid/uuidv4.min.js HTTP/1.1
Host: ministeriodapalavra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ministeriodapalavra.com/
Cookie: utag_main=v_id:0184dd91e375008399069d4897e000050002000900918$_sn:1$_ss:1$_pn:1%3Bexp-session$_st:1670166436533$ses_id:1670164636533%3Bexp-session$vapi_domain:ministeriodapalavra.com; AMCV_761F7500590204020A495ED3%40AdobeOrg=1585540135%7CMCIDTS%7C19331%7CvVersion%7C4.4.0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 404 Not Found
Date: Sun, 04 Dec 2022 14:37:14 GMT
Server: Apache
Content-Length: 315
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
ocsp.sectigo.com/
172.64.155.188200 OK 1.1 kB IP 172.64.155.188:0
File type gzip compressed data, max compression\012- data
Hash d89eb44d3d59285ffea3b7b83143cb31
33d48b48b7531fb7d49276bf4f5d04887449a806
045ceeca5f2f887d27e12eb1c5613fd03d217bfbb2d2ab8bb7ec3ff4d8c6c796
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 14:37:19 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Fri, 02 Dec 2022 18:29:40 GMT
Expires: Fri, 09 Dec 2022 18:29:39 GMT
Etag: "9a676006861051c42234a10d4549ede6af89ba92"
Cache-Control: max-age=445339,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 77454784b8950b65-OSL
ocsp.sectigo.com/
172.64.155.188200 OK 472 B IP 172.64.155.188:0
Hash c5da9c31f5e2c79be8782b8c161e7250
9a676006861051c42234a10d4549ede6af89ba92
1a0a09163ffb30f5a6a2d4e2be5cdc15d1117bd5f9db1408680c5533cc4cd187
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 14:37:19 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Fri, 02 Dec 2022 18:29:40 GMT
Expires: Fri, 09 Dec 2022 18:29:39 GMT
Etag: "9a676006861051c42234a10d4549ede6af89ba92"
Cache-Control: max-age=445339,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 77454784bc6ab506-OSL
ocsp.sectigo.com/
172.64.155.188200 OK 472 B IP 172.64.155.188:0
Hash c5da9c31f5e2c79be8782b8c161e7250
9a676006861051c42234a10d4549ede6af89ba92
1a0a09163ffb30f5a6a2d4e2be5cdc15d1117bd5f9db1408680c5533cc4cd187
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 14:37:19 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Fri, 02 Dec 2022 18:29:40 GMT
Expires: Fri, 09 Dec 2022 18:29:39 GMT
Etag: "9a676006861051c42234a10d4549ede6af89ba92"
Cache-Control: max-age=445339,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 77454784ba480b55-OSL
ministeriodapalavra.com/ib/public/vetrina/libs/uaparser.min.js
162.241.55.185404 Not Found 315 B URL HTTP/1.1 ministeriodapalavra.com/ib/public/vetrina/libs/uaparser.min.js
IP 162.241.55.185:0
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
Analyzer Verdict Alert openphish Intesa Sanpaolo
fortinet Phishing
GET /ib/public/vetrina/libs/uaparser.min.js HTTP/1.1
Host: ministeriodapalavra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ministeriodapalavra.com/
Cookie: utag_main=v_id:0184dd91e375008399069d4897e000050002000900918$_sn:1$_ss:1$_pn:1%3Bexp-session$_st:1670166436533$ses_id:1670164636533%3Bexp-session$vapi_domain:ministeriodapalavra.com; AMCV_761F7500590204020A495ED3%40AdobeOrg=1585540135%7CMCIDTS%7C19331%7CvVersion%7C4.4.0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 404 Not Found
Date: Sun, 04 Dec 2022 14:37:14 GMT
Server: Apache
Content-Length: 315
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
ministeriodapalavra.com/ib/public/vetrina/arch/archbridge.js?v=e7e3dfa
162.241.55.185404 Not Found 315 B URL HTTP/1.1 ministeriodapalavra.com/ib/public/vetrina/arch/archbridge.js?v=e7e3dfa
IP 162.241.55.185:0
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
Analyzer Verdict Alert openphish Intesa Sanpaolo
fortinet Phishing
GET /ib/public/vetrina/arch/archbridge.js?v=e7e3dfa HTTP/1.1
Host: ministeriodapalavra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ministeriodapalavra.com/
Cookie: utag_main=v_id:0184dd91e375008399069d4897e000050002000900918$_sn:1$_ss:1$_pn:1%3Bexp-session$_st:1670166436533$ses_id:1670164636533%3Bexp-session$vapi_domain:ministeriodapalavra.com; AMCV_761F7500590204020A495ED3%40AdobeOrg=1585540135%7CMCIDTS%7C19331%7CvVersion%7C4.4.0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 404 Not Found
Date: Sun, 04 Dec 2022 14:37:14 GMT
Server: Apache
Content-Length: 315
Keep-Alive: timeout=5, max=91
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
cdn.000webhost.com/000webhost/logo/footer-powered-by-000webhost-white2.png
104.19.185.120200 OK 1.7 kB URL HTTP/2 cdn.000webhost.com/000webhost/logo/footer-powered-by-000webhost-white2.png
IP 104.19.185.120:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 4f8ead9b4116b3a5098cf60e0e4195b3
4a783b5ab6cf8a075d89b16fb67250b5f5ed9a5b
86f2673ec74a632865109a76b2232f4f5b3587daa219e07a17ef1d9c76a0fda5
GET /000webhost/logo/footer-powered-by-000webhost-white2.png HTTP/1.1
Host: cdn.000webhost.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ministeriodapalavra.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 04 Dec 2022 14:37:19 GMT
content-type: image/webp
content-length: 1696
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=2046
content-disposition: inline; filename="footer-powered-by-000webhost-white2.webp"
etag: "637f2580-7fe"
last-modified: Thu, 24 Nov 2022 08:04:16 GMT
strict-transport-security: max-age=2592000
vary: Accept
x-content-type-options: nosniff
x-frame-options: sameorigin
x-hostinger-datacenter: srv
x-hostinger-node: nl-srv-cdn1
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 967
expires: Sun, 04 Dec 2022 18:37:19 GMT
cache-control: public, max-age=14400
accept-ranges: bytes
server: cloudflare
cf-ray: 7745478508cfb4ed-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ministeriodapalavra.com/isp_files/clientlib-site/css/fonts/OpenSans-Regular7abf-3.html?2r5i7k
162.241.55.185200 OK 19 kB URL HTTP/1.1 ministeriodapalavra.com/isp_files/clientlib-site/css/fonts/OpenSans-Regular7abf-3.html?2r5i7k
IP 162.241.55.185:0
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- assembler source, ASCII text, with very long lines (5405)
Hash adec7129663ef616a9075b0dde44350e
d155704fab981ace91c2329592fff8595f263fcd
68f99278dfb6d0ec9cd0087d2e8f22bff0ccd2b02e3fca72d56f81438d70dc55
GET /isp_files/clientlib-site/css/fonts/OpenSans-Regular7abf-3.html?2r5i7k HTTP/1.1
Host: ministeriodapalavra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://ministeriodapalavra.com/isp_files/clientlib-all.css
Cookie: utag_main=v_id:0184dd91e375008399069d4897e000050002000900918$_sn:1$_ss:1$_pn:1%3Bexp-session$_st:1670166436533$ses_id:1670164636533%3Bexp-session$vapi_domain:ministeriodapalavra.com; AMCV_761F7500590204020A495ED3%40AdobeOrg=1585540135%7CMCIDTS%7C19331%7CvVersion%7C4.4.0
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 14:37:14 GMT
Server: Apache
Last-Modified: Thu, 25 Feb 2021 00:43:40 GMT
Accept-Ranges: bytes
Content-Length: 18837
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: text/html
dpm.demdex.net/id?d_visid_ver=4.4.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_verify=1&d_orgid=761F7500590204020A495ED3%40AdobeOrg&d_nsid=0&ts=1670164637180
52.211.247.227302 Found 0 B URL HTTP/1.1 dpm.demdex.net/id?d_visid_ver=4.4.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_verify=1&d_orgid=761F7500590204020A495ED3%40AdobeOrg&d_nsid=0&ts=1670164637180
IP 52.211.247.227:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /id?d_visid_ver=4.4.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_verify=1&d_orgid=761F7500590204020A495ED3%40AdobeOrg&d_nsid=0&ts=1670164637180 HTTP/1.1
Host: dpm.demdex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Origin: https://ministeriodapalavra.com
Connection: keep-alive
Referer: https://ministeriodapalavra.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://ministeriodapalavra.com
Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private
DCS: dcs-prod-irl1-1-v045-0078c8bc4.edge-irl1.demdex.com 0 ms
Expires: Thu, 01 Jan 1970 00:00:00 UTC
Location: https://dpm.demdex.net/id/rd?d_visid_ver=4.4.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_verify=1&d_orgid=761F7500590204020A495ED3%40AdobeOrg&d_nsid=0&ts=1670164637180
P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT"
Pragma: no-cache
set-cookie: demdex=00723208271817148503947068213360088703; Max-Age=15552000; Expires=Fri, 02 Jun 2023 14:37:19 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin
X-TID: pUOh7wWbTuM=
Content-Length: 0
Connection: keep-alive
ministeriodapalavra.com/isp_files/Home-Computer-Business.png
162.241.55.185404 Not Found 315 B URL HTTP/1.1 ministeriodapalavra.com/isp_files/Home-Computer-Business.png
IP 162.241.55.185:0
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
Analyzer Verdict Alert openphish Intesa Sanpaolo
GET /isp_files/Home-Computer-Business.png HTTP/1.1
Host: ministeriodapalavra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ministeriodapalavra.com/
Cookie: utag_main=v_id:0184dd91e375008399069d4897e000050002000900918$_sn:1$_ss:1$_pn:1%3Bexp-session$_st:1670166436533$ses_id:1670164636533%3Bexp-session$vapi_domain:ministeriodapalavra.com; AMCV_761F7500590204020A495ED3%40AdobeOrg=1585540135%7CMCIDTS%7C19331%7CvVersion%7C4.4.0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 404 Not Found
Date: Sun, 04 Dec 2022 14:37:14 GMT
Server: Apache
Content-Length: 315
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
ministeriodapalavra.com/isp_files/clientlib-site/css/images/tool-arr-down.html
162.241.55.185200 OK 19 kB URL HTTP/1.1 ministeriodapalavra.com/isp_files/clientlib-site/css/images/tool-arr-down.html
IP 162.241.55.185:0
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- assembler source, ASCII text, with very long lines (5405)
Hash adec7129663ef616a9075b0dde44350e
d155704fab981ace91c2329592fff8595f263fcd
68f99278dfb6d0ec9cd0087d2e8f22bff0ccd2b02e3fca72d56f81438d70dc55
Analyzer Verdict Alert openphish Intesa Sanpaolo
fortinet Phishing
GET /isp_files/clientlib-site/css/images/tool-arr-down.html HTTP/1.1
Host: ministeriodapalavra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ministeriodapalavra.com/isp_files/clientlib-all.css
Cookie: utag_main=v_id:0184dd91e375008399069d4897e000050002000900918$_sn:1$_ss:1$_pn:1%3Bexp-session$_st:1670166436533$ses_id:1670164636533%3Bexp-session$vapi_domain:ministeriodapalavra.com; AMCV_761F7500590204020A495ED3%40AdobeOrg=1585540135%7CMCIDTS%7C19331%7CvVersion%7C4.4.0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 14:37:14 GMT
Server: Apache
Last-Modified: Thu, 25 Feb 2021 00:43:40 GMT
Accept-Ranges: bytes
Content-Length: 18837
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: text/html
ministeriodapalavra.com/isp_files/footer_image.png
162.241.55.185200 OK 1.6 kB URL HTTP/1.1 ministeriodapalavra.com/isp_files/footer_image.png
IP 162.241.55.185:0
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 30 x 30, 8-bit/color RGB, non-interlaced\012- data
Hash fe2e33b806798c4940ec29050769d7be
7f84f4a5f3f90f36bcbe8037cb41bded19309286
17b4afca46166fc395e83752554c9e737206f172f9ea7c155cb936d7af9ef9fc
Analyzer Verdict Alert openphish Intesa Sanpaolo
GET /isp_files/footer_image.png HTTP/1.1
Host: ministeriodapalavra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ministeriodapalavra.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 14:37:14 GMT
Server: Apache
Last-Modified: Wed, 24 Feb 2021 16:51:14 GMT
Accept-Ranges: bytes
Content-Length: 1592
Keep-Alive: timeout=5, max=90
Connection: Keep-Alive
Content-Type: image/png
ocsp.sectigo.com/
172.64.155.188200 OK 472 B IP 172.64.155.188:0
Hash c5da9c31f5e2c79be8782b8c161e7250
9a676006861051c42234a10d4549ede6af89ba92
1a0a09163ffb30f5a6a2d4e2be5cdc15d1117bd5f9db1408680c5533cc4cd187
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 14:37:19 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Fri, 02 Dec 2022 18:29:40 GMT
Expires: Fri, 09 Dec 2022 18:29:39 GMT
Etag: "9a676006861051c42234a10d4549ede6af89ba92"
Cache-Control: max-age=445339,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 77454784bbeab4ee-OSL
ocsp.sectigo.com/
172.64.155.188200 OK 472 B IP 172.64.155.188:0
Hash c5da9c31f5e2c79be8782b8c161e7250
9a676006861051c42234a10d4549ede6af89ba92
1a0a09163ffb30f5a6a2d4e2be5cdc15d1117bd5f9db1408680c5533cc4cd187
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 14:37:19 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Fri, 02 Dec 2022 18:29:40 GMT
Expires: Fri, 09 Dec 2022 18:29:39 GMT
Etag: "9a676006861051c42234a10d4549ede6af89ba92"
Cache-Control: max-age=445339,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 77454784ba3efab4-OSL
ministeriodapalavra.com/fonts/ispfont-3.html
162.241.55.185200 OK 19 kB URL HTTP/1.1 ministeriodapalavra.com/fonts/ispfont-3.html
IP 162.241.55.185:0
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- assembler source, ASCII text, with very long lines (5405)
Hash adec7129663ef616a9075b0dde44350e
d155704fab981ace91c2329592fff8595f263fcd
68f99278dfb6d0ec9cd0087d2e8f22bff0ccd2b02e3fca72d56f81438d70dc55
Analyzer Verdict Alert openphish Intesa Sanpaolo
fortinet Phishing
GET /fonts/ispfont-3.html HTTP/1.1
Host: ministeriodapalavra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ministeriodapalavra.com/isp_files/ArchIbPublicStyle.css
Cookie: utag_main=v_id:0184dd91e375008399069d4897e000050002000900918$_sn:1$_ss:0$_pn:2%3Bexp-session$_st:1670166437172$ses_id:1670164636533%3Bexp-session$vapi_domain:ministeriodapalavra.com; AMCV_761F7500590204020A495ED3%40AdobeOrg=1585540135%7CMCIDTS%7C19331%7CvVersion%7C4.4.0
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 14:37:14 GMT
Server: Apache
Last-Modified: Thu, 25 Feb 2021 00:43:40 GMT
Accept-Ranges: bytes
Content-Length: 18837
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: text/html
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash da9700d928847bca71f73dc9ca89bd1c
2f156a1557a7504da776ed9a82dc52563662be6f
428ed39905a42b1fc7aaf84f2144caf58ddcb53ac2fbda9af61784ca7394a344
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 14:37:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
dpm.demdex.net/id/rd?d_visid_ver=4.4.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_verify=1&d_orgid=761F7500590204020A495ED3%40AdobeOrg&d_nsid=0&ts=1670164637180
52.211.247.227200 OK 124 B URL HTTP/1.1 dpm.demdex.net/id/rd?d_visid_ver=4.4.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_verify=1&d_orgid=761F7500590204020A495ED3%40AdobeOrg&d_nsid=0&ts=1670164637180
IP 52.211.247.227:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 1f6783349ac4177ec3b3845fd520dca6
d84e7a43a8c8ff6f1a568ad6cb4162767f5b32b7
64bc30aa6a9d9e5396bb67c6af32c31f5ca6610641f0bdea10d759281df6adca
GET /id/rd?d_visid_ver=4.4.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_verify=1&d_orgid=761F7500590204020A495ED3%40AdobeOrg&d_nsid=0&ts=1670164637180 HTTP/1.1
Host: dpm.demdex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://ministeriodapalavra.com
Content-Type: application/x-www-form-urlencoded
Referer: https://ministeriodapalavra.com/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://ministeriodapalavra.com
Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private
content-encoding: gzip
Content-Type: application/json;charset=utf-8
DCS: dcs-prod-irl1-1-v045-0826e4ce6.edge-irl1.demdex.com 0 ms
Expires: Thu, 01 Jan 1970 00:00:00 UTC
P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT"
Pragma: no-cache
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin
X-Error: 172
X-TID: OpKW/gWZToo=
Content-Length: 124
Connection: keep-alive
fonts.gstatic.com/s/opensans/v34/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVI.woff2
142.250.74.35200 OK 17 kB URL HTTP/2 fonts.gstatic.com/s/opensans/v34/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVI.woff2
IP 142.250.74.35:0
File type Web Open Font Format (Version 2), TrueType, length 16740, version 1.0\012- data
Hash e43b535855a4ae53bd5b07a6eeb3bf67
6507312d9491156036316484bf8dc41e8b52ddd9
b34551ae25916c460423b82beb8e0675b27f76a9a2908f18286260fbd6de6681
GET /s/opensans/v34/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVI.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://ministeriodapalavra.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 16740
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 28 Nov 2022 18:52:55 GMT
expires: Tue, 28 Nov 2023 18:52:55 GMT
cache-control: public, max-age=31536000
age: 503064
last-modified: Mon, 15 Aug 2022 18:14:44 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ministeriodapalavra.com/ib/public/vetrina/libs/uuid/uuidv5.min.js
162.241.55.185404 Not Found 315 B URL HTTP/1.1 ministeriodapalavra.com/ib/public/vetrina/libs/uuid/uuidv5.min.js
IP 162.241.55.185:0
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
Analyzer Verdict Alert openphish Intesa Sanpaolo
fortinet Phishing
GET /ib/public/vetrina/libs/uuid/uuidv5.min.js HTTP/1.1
Host: ministeriodapalavra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ministeriodapalavra.com/
Cookie: utag_main=v_id:0184dd91e375008399069d4897e000050002000900918$_sn:1$_ss:0$_pn:2%3Bexp-session$_st:1670166437172$ses_id:1670164636533%3Bexp-session$vapi_domain:ministeriodapalavra.com; AMCV_761F7500590204020A495ED3%40AdobeOrg=1585540135%7CMCIDTS%7C19331%7CvVersion%7C4.4.0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 404 Not Found
Date: Sun, 04 Dec 2022 14:37:15 GMT
Server: Apache
Content-Length: 315
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
ministeriodapalavra.com/isp_files/footer_image_0.png
162.241.55.185200 OK 1.9 kB URL HTTP/1.1 ministeriodapalavra.com/isp_files/footer_image_0.png
IP 162.241.55.185:0
ASN #46606 UNIFIEDLAYER-AS-1
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 30x30, components 3\012- data
Hash 61c25ea9855ecf15e827129facb1a6aa
c1c80aba18672b7dd46bfc2b5dea62bc4b7a06ca
6a471ccdefd7b51f03ad674ef48a005a7acc76d159d3b718eab59ce83e0489bb
Analyzer Verdict Alert openphish Intesa Sanpaolo
GET /isp_files/footer_image_0.png HTTP/1.1
Host: ministeriodapalavra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ministeriodapalavra.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 14:37:15 GMT
Server: Apache
Last-Modified: Wed, 24 Feb 2021 16:51:16 GMT
Accept-Ranges: bytes
Content-Length: 1920
Keep-Alive: timeout=5, max=92
Connection: Keep-Alive
Content-Type: image/png
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash de9f2aefad9709e8d9f8eb1af3ba064a
dc2929fe783523d6664b253ea88e6e23fff1f615
632d6a09678e48bc6474cdcb38ca92717906f2e18920b6080b17ae7a50cd9dec
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "632D6A09678E48BC6474CDCB38CA92717906F2E18920B6080B17AE7A50CD9DEC"
Last-Modified: Sat, 03 Dec 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8121
Expires: Sun, 04 Dec 2022 16:52:40 GMT
Date: Sun, 04 Dec 2022 14:37:19 GMT
Connection: keep-alive
ministeriodapalavra.com/isp_files/footer_image_1.jpg
162.241.55.185200 OK 840 B URL HTTP/1.1 ministeriodapalavra.com/isp_files/footer_image_1.jpg
IP 162.241.55.185:0
ASN #46606 UNIFIEDLAYER-AS-1
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 30x30, components 3\012- data
Hash 121c13b8ceb32360446c2d63c374995d
fbee5a2595455562f64b622d187f156ab142f6c7
7cdcf19862698850d11936ae24dd5fc1e56783a64a56846dc1b33ac548a0634d
Analyzer Verdict Alert openphish Intesa Sanpaolo
GET /isp_files/footer_image_1.jpg HTTP/1.1
Host: ministeriodapalavra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ministeriodapalavra.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 14:37:15 GMT
Server: Apache
Last-Modified: Wed, 24 Feb 2021 16:51:16 GMT
Accept-Ranges: bytes
Content-Length: 840
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive
Content-Type: image/jpeg
ministeriodapalavra.com/isp_files/footer_image_2.jpg
162.241.55.185200 OK 831 B URL HTTP/1.1 ministeriodapalavra.com/isp_files/footer_image_2.jpg
IP 162.241.55.185:0
ASN #46606 UNIFIEDLAYER-AS-1
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 30x30, components 3\012- data
Hash b1e340c0acb26028dbbc24d3b6196590
acb4cf5d939318eb52832a5d97636a248db69128
426d4f855b51f92ce70ae5b53b71647dc23c4faa3d4df3615615e993720834ec
Analyzer Verdict Alert openphish Intesa Sanpaolo
GET /isp_files/footer_image_2.jpg HTTP/1.1
Host: ministeriodapalavra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ministeriodapalavra.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 14:37:15 GMT
Server: Apache
Last-Modified: Wed, 24 Feb 2021 16:51:16 GMT
Accept-Ranges: bytes
Content-Length: 831
Keep-Alive: timeout=5, max=89
Connection: Keep-Alive
Content-Type: image/jpeg
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash da9700d928847bca71f73dc9ca89bd1c
2f156a1557a7504da776ed9a82dc52563662be6f
428ed39905a42b1fc7aaf84f2144caf58ddcb53ac2fbda9af61784ca7394a344
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 14:37:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
a.optnmstr.com/app/js/api.min.js
194.242.11.186200 OK 28 kB URL HTTP/2 a.optnmstr.com/app/js/api.min.js
IP 194.242.11.186:0
ASN #34989 ServeTheWorld AS
File type Unicode text, UTF-8 text, with very long lines (65136), with no line terminators
Hash f49c503cf4e0fa0c8e00b1632e43b379
b2d5856f9110522456fe0a1ba8e9819260183fb2
0acc33417e8254a7dffa1de6c24a13ca1b7cf02c91148a16ce583439696bb422
GET /app/js/api.min.js HTTP/1.1
Host: a.optnmstr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ministeriodapalavra.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 04 Dec 2022 14:37:19 GMT
content-type: application/javascript
server: BunnyCDN-NO1-830
cdn-pullzone: 293267
cdn-uid: efcab737-66db-4b75-ab55-ed485d5a01dd
cdn-requestcountrycode: NO
vary: Accept-Encoding, Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
access-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
cache-control: public, max-age=31919000
etag: W/"6378026b-13ef5"
last-modified: Fri, 18 Nov 2022 22:08:43 GMT
cdn-storageserver: DE-198
cdn-requestpullsuccess: True
cdn-fileserver: 492
perma-cache: HIT
cdn-proxyver: 1.03
cdn-requestpullcode: 200
cdn-cachedat: 11/25/2022 21:21:37
cdn-edgestorageid: 830
cdn-status: 200
cdn-requestid: 35112ac71a2ccec67fce1de1d2b0a8a8
cdn-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
www.google-analytics.com/analytics.js
142.250.74.14200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP 142.250.74.14:0
File type ASCII text, with very long lines (1325)
Hash 47e6f374ca946fddd5b59871b325736c
baa9282efc8785e84d247c3bff518eaa45f101c4
16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ministeriodapalavra.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Sun, 04 Dec 2022 12:46:55 GMT
expires: Sun, 04 Dec 2022 14:46:55 GMT
cache-control: public, max-age=7200
age: 6624
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ministeriodapalavra.com/isp_files/clientlib-site/css/images/ico-burger.html
162.241.55.185200 OK 315 B URL HTTP/1.1 ministeriodapalavra.com/isp_files/clientlib-site/css/images/ico-burger.html
IP 162.241.55.185:0
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
Analyzer Verdict Alert openphish Intesa Sanpaolo
fortinet Phishing
GET /isp_files/clientlib-site/css/images/ico-burger.html HTTP/1.1
Host: ministeriodapalavra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ministeriodapalavra.com/isp_files/clientlib-all.css
Cookie: utag_main=v_id:0184dd91e375008399069d4897e000050002000900918$_sn:1$_ss:1$_pn:1%3Bexp-session$_st:1670166436533$ses_id:1670164636533%3Bexp-session$vapi_domain:ministeriodapalavra.com; AMCV_761F7500590204020A495ED3%40AdobeOrg=1585540135%7CMCIDTS%7C19331%7CvVersion%7C4.4.0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 14:37:14 GMT
Server: Apache
Last-Modified: Thu, 25 Feb 2021 00:43:40 GMT
Accept-Ranges: bytes
Content-Length: 18837
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: text/html
ministeriodapalavra.com/ib/public/vetrina/libs/uuid/uuidv4.min.js
162.241.55.185404 Not Found 315 B URL HTTP/1.1 ministeriodapalavra.com/ib/public/vetrina/libs/uuid/uuidv4.min.js
IP 162.241.55.185:0
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
Analyzer Verdict Alert openphish Intesa Sanpaolo
fortinet Phishing
GET /ib/public/vetrina/libs/uuid/uuidv4.min.js HTTP/1.1
Host: ministeriodapalavra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ministeriodapalavra.com/
Cookie: utag_main=v_id:0184dd91e375008399069d4897e000050002000900918$_sn:1$_ss:0$_pn:2%3Bexp-session$_st:1670166437172$ses_id:1670164636533%3Bexp-session$vapi_domain:ministeriodapalavra.com; AMCV_761F7500590204020A495ED3%40AdobeOrg=1585540135%7CMCIDTS%7C19331%7CvVersion%7C4.4.0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 404 Not Found
Date: Sun, 04 Dec 2022 14:37:15 GMT
Server: Apache
Content-Length: 315
Keep-Alive: timeout=5, max=92
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
cdn.000webhost.com/000webhost/logo/000webhost-logo-white.svg
104.19.185.120200 OK 4.2 kB URL HTTP/2 cdn.000webhost.com/000webhost/logo/000webhost-logo-white.svg
IP 104.19.185.120:0
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash c7fc0f505d019a1bd75bf1a4a5e9c527
326adf1e7b66576d39b6ef16ee37ce02fd3c9afd
8980f241f0548fdb4d01cdf0736be1efc53a686ad5f0c1db5f83c0bd8ce4980f
GET /000webhost/logo/000webhost-logo-white.svg HTTP/1.1
Host: cdn.000webhost.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ministeriodapalavra.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 04 Dec 2022 14:37:19 GMT
content-type: image/svg+xml
last-modified: Thu, 24 Nov 2022 08:04:16 GMT
etag: W/"637f2580-32f3"
x-hostinger-datacenter: srv
x-hostinger-node: nl-srv-cdn2
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
strict-transport-security: max-age=2592000
cf-cache-status: HIT
age: 4982
expires: Sun, 04 Dec 2022 18:37:19 GMT
cache-control: public, max-age=14400
vary: Accept-Encoding
server: cloudflare
cf-ray: 77454785fb60b4ed-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.000webhost.com/000webhost/000webhost-pages/corgi-spotlight.svg
104.19.185.120200 OK 646 B URL HTTP/2 cdn.000webhost.com/000webhost/000webhost-pages/corgi-spotlight.svg
IP 104.19.185.120:0
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (582), with no line terminators
Hash f8be6bfb73cd7997c44721cbcd133deb
08a271cfe91a3673f90403285cd86b984c9cd313
1a18491266a653d8a5a7308044c02ae1e17fcab2a00086ca6adfe960cb516986
GET /000webhost/000webhost-pages/corgi-spotlight.svg HTTP/1.1
Host: cdn.000webhost.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ministeriodapalavra.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 04 Dec 2022 14:37:19 GMT
content-type: image/svg+xml
last-modified: Thu, 24 Nov 2022 08:04:16 GMT
etag: W/"637f2580-246"
x-hostinger-datacenter: srv
x-hostinger-node: nl-srv-cdn2
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
strict-transport-security: max-age=2592000
cf-cache-status: REVALIDATED
expires: Sun, 04 Dec 2022 18:37:19 GMT
cache-control: public, max-age=14400
vary: Accept-Encoding
server: cloudflare
cf-ray: 7745478508d4b4ed-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 57644c6d19dceab7af7100cd59003818
5748dbd884d3e567fa0a8622c97f975d08381773
bb27966df8c14d331ae1bd55477941bbfddf89953b73d6ba37b86d770603d56c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BB27966DF8C14D331AE1BD55477941BBFDDF89953B73D6BA37B86D770603D56C"
Last-Modified: Sat, 03 Dec 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3189
Expires: Sun, 04 Dec 2022 15:30:28 GMT
Date: Sun, 04 Dec 2022 14:37:19 GMT
Connection: keep-alive
ministeriodapalavra.com/ib/public/vetrina/libs/uaparser.min.js
162.241.55.185404 Not Found 315 B URL HTTP/1.1 ministeriodapalavra.com/ib/public/vetrina/libs/uaparser.min.js
IP 162.241.55.185:0
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
Analyzer Verdict Alert openphish Intesa Sanpaolo
fortinet Phishing
GET /ib/public/vetrina/libs/uaparser.min.js HTTP/1.1
Host: ministeriodapalavra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ministeriodapalavra.com/
Cookie: utag_main=v_id:0184dd91e375008399069d4897e000050002000900918$_sn:1$_ss:0$_pn:2%3Bexp-session$_st:1670166437172$ses_id:1670164636533%3Bexp-session$vapi_domain:ministeriodapalavra.com; AMCV_761F7500590204020A495ED3%40AdobeOrg=1585540135%7CMCIDTS%7C19331%7CvVersion%7C4.4.0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 404 Not Found
Date: Sun, 04 Dec 2022 14:37:15 GMT
Server: Apache
Content-Length: 315
Keep-Alive: timeout=5, max=92
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 3c4319f54a5675ee9acda96c58f97ac6
210ea86db1836d430b321d59b4bd1b016c914f22
cb20ad3ec895ed3a2ae9b1a90dda6b7cc174d8851f3a15ba054a435746cbdc65
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 14:37:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash c553c0a8ab2b420ad3360281248ad3fb
07634c89c3334df80ea7d5f353585e07a766082c
f9ff3ebbfb7d15c9151e91e77efdbe06d4cb597c3e8d31cc16f56b8f2d204ec1
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1728
Cache-Control: max-age=149325
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 14:37:19 GMT
Etag: "638c4e2c-1d7"
Expires: Tue, 06 Dec 2022 08:06:04 GMT
Last-Modified: Sun, 04 Dec 2022 07:37:16 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 471
ministeriodapalavra.com/isp_files/recaptcha__en.js
162.241.55.185200 OK 4.0 kB URL HTTP/1.1 ministeriodapalavra.com/isp_files/recaptcha__en.js
IP 162.241.55.185:0
ASN #46606 UNIFIEDLAYER-AS-1
Hash de51195065680e25aa8aec3792020ef4
743af09f4df956b2006e0bc491adeefeffc734e9
0a6aea32e400ce24da3ac6c15b8469bfe26e64785cd33edf30e2be56e89c6044
Analyzer Verdict Alert openphish Intesa Sanpaolo
fortinet Phishing
GET /isp_files/recaptcha__en.js HTTP/1.1
Host: ministeriodapalavra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ministeriodapalavra.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 14:37:13 GMT
Server: Apache
Last-Modified: Wed, 24 Feb 2021 16:51:34 GMT
Accept-Ranges: bytes
Content-Length: 265101
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/javascript
ministeriodapalavra.com/ib/public/vetrina/libs/uaparser.min.js
162.241.55.185404 Not Found 315 B URL HTTP/1.1 ministeriodapalavra.com/ib/public/vetrina/libs/uaparser.min.js
IP 162.241.55.185:0
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
Analyzer Verdict Alert openphish Intesa Sanpaolo
fortinet Phishing
GET /ib/public/vetrina/libs/uaparser.min.js HTTP/1.1
Host: ministeriodapalavra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ministeriodapalavra.com/
Cookie: utag_main=v_id:0184dd91e375008399069d4897e000050002000900918$_sn:1$_ss:0$_pn:2%3Bexp-session$_st:1670166437172$ses_id:1670164636533%3Bexp-session$vapi_domain:ministeriodapalavra.com; AMCV_761F7500590204020A495ED3%40AdobeOrg=1585540135%7CMCIDTS%7C19331%7CvVersion%7C4.4.0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 404 Not Found
Date: Sun, 04 Dec 2022 14:37:15 GMT
Server: Apache
Content-Length: 315
Keep-Alive: timeout=5, max=92
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
ministeriodapalavra.com/isp_files/clientlib-site/css/fonts/ispfont-2.html
162.241.55.185200 OK 19 kB URL HTTP/1.1 ministeriodapalavra.com/isp_files/clientlib-site/css/fonts/ispfont-2.html
IP 162.241.55.185:0
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- assembler source, ASCII text, with very long lines (5405)
Hash adec7129663ef616a9075b0dde44350e
d155704fab981ace91c2329592fff8595f263fcd
68f99278dfb6d0ec9cd0087d2e8f22bff0ccd2b02e3fca72d56f81438d70dc55
Analyzer Verdict Alert openphish Intesa Sanpaolo
fortinet Phishing
GET /isp_files/clientlib-site/css/fonts/ispfont-2.html HTTP/1.1
Host: ministeriodapalavra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ministeriodapalavra.com/isp_files/clientlib-all.css
Cookie: utag_main=v_id:0184dd91e375008399069d4897e000050002000900918$_sn:1$_ss:0$_pn:2%3Bexp-session$_st:1670166437172$ses_id:1670164636533%3Bexp-session$vapi_domain:ministeriodapalavra.com; AMCV_761F7500590204020A495ED3%40AdobeOrg=1585540135%7CMCIDTS%7C19331%7CvVersion%7C4.4.0
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 14:37:15 GMT
Server: Apache
Last-Modified: Thu, 25 Feb 2021 00:43:40 GMT
Accept-Ranges: bytes
Content-Length: 18837
Keep-Alive: timeout=5, max=91
Connection: Keep-Alive
Content-Type: text/html
ministeriodapalavra.com/isp_files/clientlib-site/css/images/linkfooter-active.html
162.241.55.185200 OK 19 kB URL HTTP/1.1 ministeriodapalavra.com/isp_files/clientlib-site/css/images/linkfooter-active.html
IP 162.241.55.185:0
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- assembler source, ASCII text, with very long lines (5405)
Hash adec7129663ef616a9075b0dde44350e
d155704fab981ace91c2329592fff8595f263fcd
68f99278dfb6d0ec9cd0087d2e8f22bff0ccd2b02e3fca72d56f81438d70dc55
Analyzer Verdict Alert openphish Intesa Sanpaolo
fortinet Phishing
GET /isp_files/clientlib-site/css/images/linkfooter-active.html HTTP/1.1
Host: ministeriodapalavra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ministeriodapalavra.com/isp_files/clientlib-all.css
Cookie: utag_main=v_id:0184dd91e375008399069d4897e000050002000900918$_sn:1$_ss:1$_pn:1%3Bexp-session$_st:1670166436533$ses_id:1670164636533%3Bexp-session$vapi_domain:ministeriodapalavra.com; AMCV_761F7500590204020A495ED3%40AdobeOrg=1585540135%7CMCIDTS%7C19331%7CvVersion%7C4.4.0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 14:37:15 GMT
Server: Apache
Last-Modified: Thu, 25 Feb 2021 00:43:40 GMT
Accept-Ranges: bytes
Content-Length: 18837
Keep-Alive: timeout=5, max=90
Connection: Keep-Alive
Content-Type: text/html
fonts.googleapis.com/css?family=Open+Sans&display=swap
142.250.74.106200 OK 5.8 kB URL HTTP/2 fonts.googleapis.com/css?family=Open+Sans&display=swap
IP 142.250.74.106:0
Hash 35ce6070d9294912960fc079e5e08592
fa3fdbf9655e92d9a818677607ec3e3b5987f679
754d440ef67f1172db067923ab1846e8b345356930550cbd732f59c5e2537b60
GET /css?family=Open+Sans&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ministeriodapalavra.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sun, 04 Dec 2022 14:37:18 GMT
date: Sun, 04 Dec 2022 14:37:18 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ministeriodapalavra.com/isp_files/parla-con-noi.png
162.241.55.185200 OK 714 B URL HTTP/1.1 ministeriodapalavra.com/isp_files/parla-con-noi.png
IP 162.241.55.185:0
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 43 x 38, 8-bit/color RGBA, non-interlaced\012- data
Hash 679d5723383ec7ce8b446cb97814e74c
4b762f2abe6daa22454ced0e1c11804a98ed1e90
854c668d48254817bbb177aba5ee2d0fa637e9a61adb0d80bfb774516cdd4e45
Analyzer Verdict Alert openphish Intesa Sanpaolo
GET /isp_files/parla-con-noi.png HTTP/1.1
Host: ministeriodapalavra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ministeriodapalavra.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 14:37:15 GMT
Server: Apache
Last-Modified: Wed, 24 Feb 2021 16:51:32 GMT
Accept-Ranges: bytes
Content-Length: 714
Keep-Alive: timeout=5, max=91
Connection: Keep-Alive
Content-Type: image/png
api.omappapi.com/v1/optin/13439/673828
54.230.111.103401 Unauthorized 173 B URL HTTP/2 api.omappapi.com/v1/optin/13439/673828
IP 54.230.111.103:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 955b680bfb4bf580f69336d231ddada7
38abe4cb8784ca07d06382fd53f22365edc354cd
6b96b591c7bb5fba94ea48575de7dbd3248cc4d3659d219d94b25eb1cbbac83d
GET /v1/optin/13439/673828 HTTP/1.1
Host: api.omappapi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://ministeriodapalavra.com
Connection: keep-alive
Referer: https://ministeriodapalavra.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 401 Unauthorized
content-type: application/json
content-length: 173
date: Sun, 04 Dec 2022 14:37:17 GMT
access-control-allow-origin: *
access-control-allow-headers: X-CSRF-Token
expires: Sun, 04 Dec 2022 14:37:49 GMT
cache-control: public, max-age=120, stale-while-revalidate=1800
x-user-agent: standard--
x-cache-config: 0 0
vary: Accept-Encoding, User-Agent
server: Pagely Gateway/1.5.1
x-cache: Error from cloudfront
via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: hSb4LrkI4WEPY8Xuei_q9ey1rfYP7FrSldTPoZjy_l1GC_TmmGNSWw==
X-Firefox-Spdy: h2
api.omappapi.com/v1/optin/13439/673828
54.230.111.103401 Unauthorized 173 B URL HTTP/2 api.omappapi.com/v1/optin/13439/673828
IP 54.230.111.103:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 955b680bfb4bf580f69336d231ddada7
38abe4cb8784ca07d06382fd53f22365edc354cd
6b96b591c7bb5fba94ea48575de7dbd3248cc4d3659d219d94b25eb1cbbac83d
GET /v1/optin/13439/673828 HTTP/1.1
Host: api.omappapi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://ministeriodapalavra.com
Connection: keep-alive
Referer: https://ministeriodapalavra.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 401 Unauthorized
content-type: application/json
content-length: 173
date: Sun, 04 Dec 2022 14:37:17 GMT
access-control-allow-origin: *
access-control-allow-headers: X-CSRF-Token
expires: Sun, 04 Dec 2022 14:37:49 GMT
cache-control: public, max-age=120, stale-while-revalidate=1800
x-user-agent: standard--
x-cache-config: 0 0
vary: Accept-Encoding, User-Agent
server: Pagely Gateway/1.5.1
x-cache: Error from cloudfront
via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: FzH3E9Pm-3jobekrlPsO-95uuCQNsNjjPAtSw-8QDU4F_o9wnQwrgQ==
X-Firefox-Spdy: h2
ministeriodapalavra.com/isp_files/css.css
162.241.55.185200 OK 1.2 MB URL HTTP/1.1 ministeriodapalavra.com/isp_files/css.css
IP 162.241.55.185:0
ASN #46606 UNIFIEDLAYER-AS-1
File type ASCII text, with very long lines (65371)
Size 1.2 MB (1189261 bytes)
Hash 7daaf51ab77bf25fd1fcc095ee9a0bf2
9410060dc93cac6acb8e3bc10d134f107e882f51
41694e2b8b66674c43732a8802ec7ab6beff5fb1e8c572014dcb976585ccaf34
Analyzer Verdict Alert openphish Intesa Sanpaolo
GET /isp_files/css.css HTTP/1.1
Host: ministeriodapalavra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ministeriodapalavra.com/step1.html
Cookie: utag_main=v_id:0184dd91e375008399069d4897e000050002000900918$_sn:1$_ss:1$_pn:1%3Bexp-session$_st:1670166436533$ses_id:1670164636533%3Bexp-session$vapi_domain:ministeriodapalavra.com; AMCV_761F7500590204020A495ED3%40AdobeOrg=1585540135%7CMCIDTS%7C19331%7CvVersion%7C4.4.0
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 14:37:14 GMT
Server: Apache
Last-Modified: Wed, 24 Feb 2021 16:51:14 GMT
Accept-Ranges: bytes
Content-Length: 1189261
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: text/css
ministeriodapalavra.com/isp_files/clientlib-site/css/fonts/ispfont-3.html
162.241.55.185200 OK 19 kB URL HTTP/1.1 ministeriodapalavra.com/isp_files/clientlib-site/css/fonts/ispfont-3.html
IP 162.241.55.185:0
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- assembler source, ASCII text, with very long lines (5405)
Hash adec7129663ef616a9075b0dde44350e
d155704fab981ace91c2329592fff8595f263fcd
68f99278dfb6d0ec9cd0087d2e8f22bff0ccd2b02e3fca72d56f81438d70dc55
Analyzer Verdict Alert openphish Intesa Sanpaolo
fortinet Phishing
GET /isp_files/clientlib-site/css/fonts/ispfont-3.html HTTP/1.1
Host: ministeriodapalavra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://ministeriodapalavra.com/isp_files/clientlib-all.css
Cookie: utag_main=v_id:0184dd91e375008399069d4897e000050002000900918$_sn:1$_ss:0$_pn:2%3Bexp-session$_st:1670166437172$ses_id:1670164636533%3Bexp-session$vapi_domain:ministeriodapalavra.com; AMCV_761F7500590204020A495ED3%40AdobeOrg=1585540135%7CMCIDTS%7C19331%7CvVersion%7C4.4.0; _omappvp=sDpL8GQOCr2b7x9hq29vETwWgwBt25jzFU9c2dd6GKl9LegoHYChiOV0Dfj7Zc49KzQUdbRphz4j0Qgh0355uUVtlJ01U3Ww; _omappvs=1670164637484; _ga=GA1.2.948656355.1670164638; _gid=GA1.2.1067199240.1670164638; _gat=1
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 14:37:15 GMT
Server: Apache
Last-Modified: Thu, 25 Feb 2021 00:43:40 GMT
Accept-Ranges: bytes
Content-Length: 18837
Keep-Alive: timeout=5, max=86
Connection: Keep-Alive
Content-Type: text/html
ministeriodapalavra.com/ib/public/vetrina/libs/uuid/uuidv5.min.js
162.241.55.185404 Not Found 315 B URL HTTP/1.1 ministeriodapalavra.com/ib/public/vetrina/libs/uuid/uuidv5.min.js
IP 162.241.55.185:0
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
Analyzer Verdict Alert openphish Intesa Sanpaolo
fortinet Phishing
GET /ib/public/vetrina/libs/uuid/uuidv5.min.js HTTP/1.1
Host: ministeriodapalavra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ministeriodapalavra.com/
Cookie: utag_main=v_id:0184dd91e375008399069d4897e000050002000900918$_sn:1$_ss:0$_pn:2%3Bexp-session$_st:1670166437172$ses_id:1670164636533%3Bexp-session$vapi_domain:ministeriodapalavra.com; AMCV_761F7500590204020A495ED3%40AdobeOrg=1585540135%7CMCIDTS%7C19331%7CvVersion%7C4.4.0; _omappvp=sDpL8GQOCr2b7x9hq29vETwWgwBt25jzFU9c2dd6GKl9LegoHYChiOV0Dfj7Zc49KzQUdbRphz4j0Qgh0355uUVtlJ01U3Ww; _omappvs=1670164637484; _ga=GA1.2.948656355.1670164638; _gid=GA1.2.1067199240.1670164638; _gat=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 404 Not Found
Date: Sun, 04 Dec 2022 14:37:15 GMT
Server: Apache
Content-Length: 315
Keep-Alive: timeout=5, max=91
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
ministeriodapalavra.com/isp_files/utente_ok_green.png
162.241.55.185200 OK 2.4 kB URL HTTP/1.1 ministeriodapalavra.com/isp_files/utente_ok_green.png
IP 162.241.55.185:0
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 45 x 39, 8-bit/color RGBA, non-interlaced\012- data
Hash bf9ffdd6a52e111e89c072d986cf4f6d
e42b80e12b049296fcad35a25b2339be760d6c06
af48163da7ed2b30cde51f80f1000ea670cedfe33ae6c9fbbb020c3e90da9727
Analyzer Verdict Alert openphish Intesa Sanpaolo
GET /isp_files/utente_ok_green.png HTTP/1.1
Host: ministeriodapalavra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ministeriodapalavra.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 14:37:15 GMT
Server: Apache
Last-Modified: Wed, 24 Feb 2021 16:51:38 GMT
Accept-Ranges: bytes
Content-Length: 2375
Keep-Alive: timeout=5, max=89
Connection: Keep-Alive
Content-Type: image/png
ministeriodapalavra.com/ib/public/vetrina/arch/archbridge.js?v=e7e3dfa
162.241.55.185404 Not Found 315 B URL HTTP/1.1 ministeriodapalavra.com/ib/public/vetrina/arch/archbridge.js?v=e7e3dfa
IP 162.241.55.185:0
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
Analyzer Verdict Alert openphish Intesa Sanpaolo
fortinet Phishing
GET /ib/public/vetrina/arch/archbridge.js?v=e7e3dfa HTTP/1.1
Host: ministeriodapalavra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ministeriodapalavra.com/
Cookie: utag_main=v_id:0184dd91e375008399069d4897e000050002000900918$_sn:1$_ss:0$_pn:2%3Bexp-session$_st:1670166437172$ses_id:1670164636533%3Bexp-session$vapi_domain:ministeriodapalavra.com; AMCV_761F7500590204020A495ED3%40AdobeOrg=1585540135%7CMCIDTS%7C19331%7CvVersion%7C4.4.0; _omappvp=sDpL8GQOCr2b7x9hq29vETwWgwBt25jzFU9c2dd6GKl9LegoHYChiOV0Dfj7Zc49KzQUdbRphz4j0Qgh0355uUVtlJ01U3Ww; _omappvs=1670164637484; _ga=GA1.2.948656355.1670164638; _gid=GA1.2.1067199240.1670164638; _gat=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 404 Not Found
Date: Sun, 04 Dec 2022 14:37:15 GMT
Server: Apache
Content-Length: 315
Keep-Alive: timeout=5, max=90
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
ministeriodapalavra.com/isp_files/arrows.png
162.241.55.185200 OK 528 B URL HTTP/1.1 ministeriodapalavra.com/isp_files/arrows.png
IP 162.241.55.185:0
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 25 x 25, 8-bit/color RGBA, non-interlaced\012- data
Hash f844b407ff44c6666d38477ae7dff5db
ea52a6b99560e25cd531c06ada26b76ccee59182
354a16c92816350830076c1f625525d9460ff1269cb3b8766592540d5ad28ba8
Analyzer Verdict Alert openphish Intesa Sanpaolo
GET /isp_files/arrows.png HTTP/1.1
Host: ministeriodapalavra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ministeriodapalavra.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 14:37:15 GMT
Server: Apache
Last-Modified: Wed, 24 Feb 2021 16:51:06 GMT
Accept-Ranges: bytes
Content-Length: 528
Keep-Alive: timeout=5, max=90
Connection: Keep-Alive
Content-Type: image/png
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 83e0936435ad95a15c9ec5ff9520f4fe
a8225ee0d8ae117f977f7ff817c342c62e91b5a9
ef0f5b2ab2055446d4ea8b738f605c3bf835cf72e872d6a9c9a6c9b2917737e7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EF0F5B2AB2055446D4EA8B738F605C3BF835CF72E872D6A9C9A6C9B2917737E7"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6536
Expires: Sun, 04 Dec 2022 16:26:16 GMT
Date: Sun, 04 Dec 2022 14:37:20 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 83e0936435ad95a15c9ec5ff9520f4fe
a8225ee0d8ae117f977f7ff817c342c62e91b5a9
ef0f5b2ab2055446d4ea8b738f605c3bf835cf72e872d6a9c9a6c9b2917737e7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EF0F5B2AB2055446D4EA8B738F605C3BF835CF72E872D6A9C9A6C9B2917737E7"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6536
Expires: Sun, 04 Dec 2022 16:26:16 GMT
Date: Sun, 04 Dec 2022 14:37:20 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6df54ea7-8915-4ac7-af2b-6a71ce14dbf4.webp
34.120.237.76200 OK 5.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6df54ea7-8915-4ac7-af2b-6a71ce14dbf4.webp
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 43309032a892c486f9985ef520df696e
36f4682ca6a33ff80ee02129c77e6f27e996ede0
24225ff504f30405d9ec3feb2555c738fcca0d6b265f285aa9c73a64c78a496e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6df54ea7-8915-4ac7-af2b-6a71ce14dbf4.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5681
x-amzn-requestid: 8f0d66b8-d532-48d9-9a29-74540cd6ab3a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cltXnEotIAMFqkA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638bc296-27349a376ff819ab63b04a81;Sampled=0
x-amzn-remapped-date: Sat, 03 Dec 2022 21:41:42 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Uz-wJTZjej3sjP-O68BQ4hB_kkAecG0o7GkeZUan90ZgV87g0Cg_ZA==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 3cd7af07832481c336aa1c93c9b4a6fe.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Dec 2022 21:52:38 GMT
age: 60282
etag: "36f4682ca6a33ff80ee02129c77e6f27e996ede0"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4d571e0e-b14e-436b-8156-2e49aad75d4f.png
34.120.237.76200 OK 16 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4d571e0e-b14e-436b-8156-2e49aad75d4f.png
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 14dcca2a9c4792d835ee709bcd947402
1d702df3a64258628f4124eafd580695f2d350af
da01dcd8fef7c50bdb6f7a8a6a4955694092f479df3dba72f7fa69d7280d07b2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4d571e0e-b14e-436b-8156-2e49aad75d4f.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 16143
x-amzn-requestid: dc86fad4-4e53-42c9-9b0a-5e4d2cfcd087
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cdGyLGqmoAMFnaA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638851a7-0ea324b31e8c6578098b8ab9;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 07:03:03 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: kRs3oBWnSs5asyPdvz6kkooy7pqm2Yr8R_2x8EXCVn3dBz_aEJurRQ==
via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 d6b180eb367f7de26d67a9f3901b96a6.cloudfront.net (CloudFront), 1.1 google
date: Sun, 04 Dec 2022 07:26:41 GMT
age: 25839
etag: "1d702df3a64258628f4124eafd580695f2d350af"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fae18d1b5-3b75-4897-bd1b-03651e437c2e.jpeg
34.120.237.76200 OK 4.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fae18d1b5-3b75-4897-bd1b-03651e437c2e.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c01fe1cccdb3b672bbade6d98217ffe9
a9a529dc9894827f6243a1bf57f81caa4fe88fc2
c43da6212c79a08e22e78e04e99e8f5422e64b4b0a87f30b7907f1b4bc675c71
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fae18d1b5-3b75-4897-bd1b-03651e437c2e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4666
x-amzn-requestid: 850d341f-5ccb-453c-8adf-a8194f8fbdad
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: clr_-GiboAMFwww=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638bc066-766293f2526e637235067aca;Sampled=0
x-amzn-remapped-date: Sat, 03 Dec 2022 21:32:22 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: z5uqgjB-Bsl0U55a8aFi37cpJ65Vnbjm6bJ2GnMpaO7RXsMZsOCbPQ==
via: 1.1 112c6b3f9aea37a6cb00b7d933e5af6e.cloudfront.net (CloudFront), 1.1 b2f9564ebf9c745cc2ceae96d434977e.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Dec 2022 21:44:01 GMT
age: 60799
etag: "a9a529dc9894827f6243a1bf57f81caa4fe88fc2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd528f6ee-d348-431d-8220-5c8b154b2941.jpeg
34.120.237.76200 OK 8.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd528f6ee-d348-431d-8220-5c8b154b2941.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash db1701b7b9d161a0c935bb6e10b17893
22a8c4bd58c729c1abcf794466e8f3231dfb034b
b495524a33e5b1d3ba34cfbe867ada0da956c061370b1fcde06b23a6194a9787
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd528f6ee-d348-431d-8220-5c8b154b2941.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8315
x-amzn-requestid: f1bcc33b-aad9-4d3b-b1f9-49282f2d4fb9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: clsAMGVboAMFfxg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638bc067-13472a097177d4751c8f7a8c;Sampled=0
x-amzn-remapped-date: Sat, 03 Dec 2022 21:32:23 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 6UQ_BhPmpVpe9w6gsExB-EpNq_syeCCK6fr4Y1FFK1jDJh_n1Sd0Eg==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 556b99c6be8d7078b9f067347c62df6a.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Dec 2022 21:52:47 GMT
age: 60273
etag: "22a8c4bd58c729c1abcf794466e8f3231dfb034b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 83e0936435ad95a15c9ec5ff9520f4fe
a8225ee0d8ae117f977f7ff817c342c62e91b5a9
ef0f5b2ab2055446d4ea8b738f605c3bf835cf72e872d6a9c9a6c9b2917737e7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EF0F5B2AB2055446D4EA8B738F605C3BF835CF72E872D6A9C9A6C9B2917737E7"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6536
Expires: Sun, 04 Dec 2022 16:26:16 GMT
Date: Sun, 04 Dec 2022 14:37:20 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F19c9bb39-be15-49f9-aad9-2cc511601111.jpeg
34.120.237.76200 OK 9.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F19c9bb39-be15-49f9-aad9-2cc511601111.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a6e7b32ac999cf3c899a234c621fa91a
fc5d4f3163ebb9faf85968cbb1d194e8e68418be
f12db3aed126006fee00649aba0b3eaae900de200b85b9523866a90b5494f18e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F19c9bb39-be15-49f9-aad9-2cc511601111.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8989
x-amzn-requestid: abce0b01-f70c-42ad-b242-5a24735fe4c2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cltl4Gk2oAMFSWQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638bc2f2-1cccffff5199dffe70264a95;Sampled=0
x-amzn-remapped-date: Sat, 03 Dec 2022 21:43:14 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: PFl7VUrzRkMFNnTiIw_cbGCyrEFn43eUSlZfT0nUhUmjjyXT7JfjMA==
via: 1.1 eece508272520f70691e4eebdc5a6dea.cloudfront.net (CloudFront), 1.1 d8792dbd3191bbe722eba5b536b979c8.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Dec 2022 21:50:01 GMT
age: 60439
etag: "fc5d4f3163ebb9faf85968cbb1d194e8e68418be"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 83e0936435ad95a15c9ec5ff9520f4fe
a8225ee0d8ae117f977f7ff817c342c62e91b5a9
ef0f5b2ab2055446d4ea8b738f605c3bf835cf72e872d6a9c9a6c9b2917737e7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EF0F5B2AB2055446D4EA8B738F605C3BF835CF72E872D6A9C9A6C9B2917737E7"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6536
Expires: Sun, 04 Dec 2022 16:26:16 GMT
Date: Sun, 04 Dec 2022 14:37:20 GMT
Connection: keep-alive
ministeriodapalavra.com/isp_files/acc-show.png
162.241.55.185200 OK 1.0 kB URL HTTP/1.1 ministeriodapalavra.com/isp_files/acc-show.png
IP 162.241.55.185:0
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 37 x 33, 8-bit/color RGBA, non-interlaced\012- data
Hash c53b2488e746a5a423d1024ca318e41e
32b36f817c530d595d53142257e25897bf6a73ea
7621b7efdd066ad06e4ab99786b72c02f9d126e63bfa911cee193b1071fa1ccd
Analyzer Verdict Alert openphish Intesa Sanpaolo
GET /isp_files/acc-show.png HTTP/1.1
Host: ministeriodapalavra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ministeriodapalavra.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 14:37:15 GMT
Server: Apache
Last-Modified: Wed, 24 Feb 2021 16:51:02 GMT
Accept-Ranges: bytes
Content-Length: 1026
Keep-Alive: timeout=5, max=85
Connection: Keep-Alive
Content-Type: image/png
ministeriodapalavra.com/isp_files/trasparenza.png
162.241.55.185200 OK 4.9 kB URL HTTP/1.1 ministeriodapalavra.com/isp_files/trasparenza.png
IP 162.241.55.185:0
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 107 x 25, 8-bit/color RGBA, non-interlaced\012- data
Hash eecd73363f285a2669afb7d9809e8853
d25dce286104c621e3e3f41953a3b67b3abf51fd
09c850d89f41e9c808d6bd12871bcfc7e6f7d76cd1f7f959a5d79ffb800f8de2
Analyzer Verdict Alert openphish Intesa Sanpaolo
GET /isp_files/trasparenza.png HTTP/1.1
Host: ministeriodapalavra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ministeriodapalavra.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 14:37:15 GMT
Server: Apache
Last-Modified: Wed, 24 Feb 2021 16:51:36 GMT
Accept-Ranges: bytes
Content-Length: 4927
Keep-Alive: timeout=5, max=88
Connection: Keep-Alive
Content-Type: image/png
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F826f887d-ca78-40db-9b7d-6c693667c155.jpeg
34.120.237.76200 OK 7.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F826f887d-ca78-40db-9b7d-6c693667c155.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c1a6f4805f59db44f9d3520d88701a58
6a0258e8c97ce09f1723382c8a16d9682b7dc50c
ae120df5e96352c6998c24c69c709dfd2b01a7ff8a7b935d496757fd7661f2f5
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F826f887d-ca78-40db-9b7d-6c693667c155.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7503
x-amzn-requestid: a4120308-c51e-4cff-99c2-90e86018b05d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cgZjCGkVIAMFpsw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6389a2e0-6fdf362a6d32449239476155;Sampled=0
x-amzn-remapped-date: Fri, 02 Dec 2022 07:01:52 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: dy619jlSTwCjwDhGuLmwTMcmuYj1Kg2oLA7xORyAYX8IHWimhNo6pw==
via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 be082a2326b7d49643607b097f1e7180.cloudfront.net (CloudFront), 1.1 google
date: Sun, 04 Dec 2022 07:16:07 GMT
age: 26473
etag: "6a0258e8c97ce09f1723382c8a16d9682b7dc50c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ministeriodapalavra.com/isp_files/logo-isp-footer.png
162.241.55.185200 OK 6.0 kB URL HTTP/1.1 ministeriodapalavra.com/isp_files/logo-isp-footer.png
IP 162.241.55.185:0
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 232 x 29, 8-bit/color RGB, non-interlaced\012- data
Hash ef01da585f296c6d8e232268cc000390
74bff78003ad10f9d52a089f6bcad4069dda8047
d9561fa4d3be12499d6736cc0781352340f9a9b209c977ccc233ac737d2c9e4d
Analyzer Verdict Alert openphish Intesa Sanpaolo
GET /isp_files/logo-isp-footer.png HTTP/1.1
Host: ministeriodapalavra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ministeriodapalavra.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 14:37:15 GMT
Server: Apache
Last-Modified: Wed, 24 Feb 2021 16:51:30 GMT
Accept-Ranges: bytes
Content-Length: 6022
Keep-Alive: timeout=5, max=90
Connection: Keep-Alive
Content-Type: image/png
ministeriodapalavra.com/isp_files/acc-hide.png
162.241.55.185200 OK 1.4 kB URL HTTP/1.1 ministeriodapalavra.com/isp_files/acc-hide.png
IP 162.241.55.185:0
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 37 x 33, 8-bit/color RGBA, non-interlaced\012- data
Hash 04075b9c724604b649a398fd38b85b45
0ffd0f9d6e2b336b835866d9db4193db665af9d3
366de85e50aa042f34ef304b5195d06a87dcc81107e0a5ac87d997d35d95b275
Analyzer Verdict Alert openphish Intesa Sanpaolo
GET /isp_files/acc-hide.png HTTP/1.1
Host: ministeriodapalavra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ministeriodapalavra.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 14:37:15 GMT
Server: Apache
Last-Modified: Wed, 24 Feb 2021 16:51:02 GMT
Accept-Ranges: bytes
Content-Length: 1367
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive
Content-Type: image/png
ministeriodapalavra.com/isp_files/logo_compara_conti.png
162.241.55.185200 OK 9.3 kB URL HTTP/1.1 ministeriodapalavra.com/isp_files/logo_compara_conti.png
IP 162.241.55.185:0
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 150 x 29, 8-bit/color RGBA, non-interlaced\012- data
Hash 55d14f23dcaed150e8eccca67f02bc03
5066ec6430a739f2ebdf14d766a73704d13bd1e2
f6980057249f4e1fc3dae211dba4e6fb2193e4f641a8e253f8513c323b7ec4ab
Analyzer Verdict Alert openphish Intesa Sanpaolo
GET /isp_files/logo_compara_conti.png HTTP/1.1
Host: ministeriodapalavra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ministeriodapalavra.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 14:37:15 GMT
Server: Apache
Last-Modified: Wed, 24 Feb 2021 16:51:32 GMT
Accept-Ranges: bytes
Content-Length: 9295
Keep-Alive: timeout=5, max=89
Connection: Keep-Alive
Content-Type: image/png
ministeriodapalavra.com/ib/public/vetrina/libs/uaparser.min.js
162.241.55.185404 Not Found 315 B URL HTTP/1.1 ministeriodapalavra.com/ib/public/vetrina/libs/uaparser.min.js
IP 162.241.55.185:0
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
Analyzer Verdict Alert openphish Intesa Sanpaolo
fortinet Phishing
GET /ib/public/vetrina/libs/uaparser.min.js HTTP/1.1
Host: ministeriodapalavra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ministeriodapalavra.com/
Cookie: utag_main=v_id:0184dd91e375008399069d4897e000050002000900918$_sn:1$_ss:0$_pn:2%3Bexp-session$_st:1670166437172$ses_id:1670164636533%3Bexp-session$vapi_domain:ministeriodapalavra.com; AMCV_761F7500590204020A495ED3%40AdobeOrg=1585540135%7CMCIDTS%7C19331%7CvVersion%7C4.4.0; _omappvp=sDpL8GQOCr2b7x9hq29vETwWgwBt25jzFU9c2dd6GKl9LegoHYChiOV0Dfj7Zc49KzQUdbRphz4j0Qgh0355uUVtlJ01U3Ww; _omappvs=1670164637484; _ga=GA1.2.948656355.1670164638; _gid=GA1.2.1067199240.1670164638; _gat=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 404 Not Found
Date: Sun, 04 Dec 2022 14:37:15 GMT
Server: Apache
Content-Length: 315
Keep-Alive: timeout=5, max=89
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
ocsp.sectigo.com/
172.64.155.188200 OK 472 B IP 172.64.155.188:0
Hash c5da9c31f5e2c79be8782b8c161e7250
9a676006861051c42234a10d4549ede6af89ba92
1a0a09163ffb30f5a6a2d4e2be5cdc15d1117bd5f9db1408680c5533cc4cd187
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 14:37:20 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Fri, 02 Dec 2022 18:29:40 GMT
Expires: Fri, 09 Dec 2022 18:29:39 GMT
Etag: "9a676006861051c42234a10d4549ede6af89ba92"
Cache-Control: max-age=445339,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 77454785391f0b65-OSL
ministeriodapalavra.com/ib/public/guestarea/styles/app.css?v=b1e0de6
162.241.55.185404 Not Found 315 B URL HTTP/1.1 ministeriodapalavra.com/ib/public/guestarea/styles/app.css?v=b1e0de6
IP 162.241.55.185:0
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
Analyzer Verdict Alert openphish Intesa Sanpaolo
fortinet Phishing
GET /ib/public/guestarea/styles/app.css?v=b1e0de6 HTTP/1.1
Host: ministeriodapalavra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ministeriodapalavra.com/
Cookie: utag_main=v_id:0184dd91e375008399069d4897e000050002000900918$_sn:1$_ss:0$_pn:2%3Bexp-session$_st:1670166437172$ses_id:1670164636533%3Bexp-session$vapi_domain:ministeriodapalavra.com; AMCV_761F7500590204020A495ED3%40AdobeOrg=1585540135%7CMCIDTS%7C19331%7CvVersion%7C4.4.0; _omappvp=sDpL8GQOCr2b7x9hq29vETwWgwBt25jzFU9c2dd6GKl9LegoHYChiOV0Dfj7Zc49KzQUdbRphz4j0Qgh0355uUVtlJ01U3Ww; _omappvs=1670164637484; _ga=GA1.2.948656355.1670164638; _gid=GA1.2.1067199240.1670164638; _gat=1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 404 Not Found
Date: Sun, 04 Dec 2022 14:37:15 GMT
Server: Apache
Content-Length: 315
Keep-Alive: timeout=5, max=84
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
ministeriodapalavra.com/ib/public/guestarea/scripts/vendor.js?v=b1e0de6
162.241.55.185404 Not Found 315 B URL HTTP/1.1 ministeriodapalavra.com/ib/public/guestarea/scripts/vendor.js?v=b1e0de6
IP 162.241.55.185:0
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
Analyzer Verdict Alert openphish Intesa Sanpaolo
fortinet Phishing
GET /ib/public/guestarea/scripts/vendor.js?v=b1e0de6 HTTP/1.1
Host: ministeriodapalavra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ministeriodapalavra.com/
Cookie: utag_main=v_id:0184dd91e375008399069d4897e000050002000900918$_sn:1$_ss:0$_pn:2%3Bexp-session$_st:1670166437172$ses_id:1670164636533%3Bexp-session$vapi_domain:ministeriodapalavra.com; AMCV_761F7500590204020A495ED3%40AdobeOrg=1585540135%7CMCIDTS%7C19331%7CvVersion%7C4.4.0; _omappvp=sDpL8GQOCr2b7x9hq29vETwWgwBt25jzFU9c2dd6GKl9LegoHYChiOV0Dfj7Zc49KzQUdbRphz4j0Qgh0355uUVtlJ01U3Ww; _omappvs=1670164637484; _ga=GA1.2.948656355.1670164638; _gid=GA1.2.1067199240.1670164638; _gat=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 404 Not Found
Date: Sun, 04 Dec 2022 14:37:15 GMT
Server: Apache
Content-Length: 315
Keep-Alive: timeout=5, max=87
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
ministeriodapalavra.com/ib/public/guestarea/scripts/app.js?v=b1e0de6
162.241.55.185404 Not Found 315 B URL HTTP/1.1 ministeriodapalavra.com/ib/public/guestarea/scripts/app.js?v=b1e0de6
IP 162.241.55.185:0
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
Analyzer Verdict Alert openphish Intesa Sanpaolo
fortinet Phishing
GET /ib/public/guestarea/scripts/app.js?v=b1e0de6 HTTP/1.1
Host: ministeriodapalavra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ministeriodapalavra.com/
Cookie: utag_main=v_id:0184dd91e375008399069d4897e000050002000900918$_sn:1$_ss:0$_pn:2%3Bexp-session$_st:1670166437172$ses_id:1670164636533%3Bexp-session$vapi_domain:ministeriodapalavra.com; AMCV_761F7500590204020A495ED3%40AdobeOrg=1585540135%7CMCIDTS%7C19331%7CvVersion%7C4.4.0; _omappvp=sDpL8GQOCr2b7x9hq29vETwWgwBt25jzFU9c2dd6GKl9LegoHYChiOV0Dfj7Zc49KzQUdbRphz4j0Qgh0355uUVtlJ01U3Ww; _omappvs=1670164637484; _ga=GA1.2.948656355.1670164638; _gid=GA1.2.1067199240.1670164638; _gat=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 404 Not Found
Date: Sun, 04 Dec 2022 14:37:15 GMT
Server: Apache
Content-Length: 315
Keep-Alive: timeout=5, max=89
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
ministeriodapalavra.com/ib/public/vetrina/arch/archbridge.js?v=e7e3dfa
162.241.55.185404 Not Found 315 B URL HTTP/1.1 ministeriodapalavra.com/ib/public/vetrina/arch/archbridge.js?v=e7e3dfa
IP 162.241.55.185:0
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
Analyzer Verdict Alert openphish Intesa Sanpaolo
fortinet Phishing
GET /ib/public/vetrina/arch/archbridge.js?v=e7e3dfa HTTP/1.1
Host: ministeriodapalavra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ministeriodapalavra.com/
Cookie: utag_main=v_id:0184dd91e375008399069d4897e000050002000900918$_sn:1$_ss:0$_pn:2%3Bexp-session$_st:1670166437172$ses_id:1670164636533%3Bexp-session$vapi_domain:ministeriodapalavra.com; AMCV_761F7500590204020A495ED3%40AdobeOrg=1585540135%7CMCIDTS%7C19331%7CvVersion%7C4.4.0; _omappvp=sDpL8GQOCr2b7x9hq29vETwWgwBt25jzFU9c2dd6GKl9LegoHYChiOV0Dfj7Zc49KzQUdbRphz4j0Qgh0355uUVtlJ01U3Ww; _omappvs=1670164637484; _ga=GA1.2.948656355.1670164638; _gid=GA1.2.1067199240.1670164638; _gat=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 404 Not Found
Date: Sun, 04 Dec 2022 14:37:15 GMT
Server: Apache
Content-Length: 315
Keep-Alive: timeout=5, max=92
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
ministeriodapalavra.com/isp_files/icon_005.png
162.241.55.185200 OK 596 B URL HTTP/1.1 ministeriodapalavra.com/isp_files/icon_005.png
IP 162.241.55.185:0
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 30 x 27, 8-bit/color RGBA, non-interlaced\012- data
Hash c7d2c21bd468f05bfdabb2e0b2238b3c
46e8967dc3ee2cd90e0e4b627b7b9fc96e8b2288
718107e6d810e9b67562f6a863033f4d10a36a4f64593dd01312aff95bc7ea16
Analyzer Verdict Alert openphish Intesa Sanpaolo
GET /isp_files/icon_005.png HTTP/1.1
Host: ministeriodapalavra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ministeriodapalavra.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 14:37:15 GMT
Server: Apache
Last-Modified: Wed, 24 Feb 2021 16:51:20 GMT
Accept-Ranges: bytes
Content-Length: 596
Keep-Alive: timeout=5, max=83
Connection: Keep-Alive
Content-Type: image/png
ministeriodapalavra.com/isp_files/logo-footer.png
162.241.55.185200 OK 11 kB URL HTTP/1.1 ministeriodapalavra.com/isp_files/logo-footer.png
IP 162.241.55.185:0
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 344 x 42, 8-bit/color RGB, interlaced\012- data
Hash 1bdff8a43af86e37593537e037e36c26
067557b4785a26539cbea69d8aca86dd8f0f8efd
10ca81e1589cc3b4b1d18a25ee6acf121970effa02449deb4beb17a880af41fd
Analyzer Verdict Alert openphish Intesa Sanpaolo
GET /isp_files/logo-footer.png HTTP/1.1
Host: ministeriodapalavra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ministeriodapalavra.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 14:37:15 GMT
Server: Apache
Last-Modified: Wed, 24 Feb 2021 16:51:30 GMT
Accept-Ranges: bytes
Content-Length: 11396
Keep-Alive: timeout=5, max=88
Connection: Keep-Alive
Content-Type: image/png
ministeriodapalavra.com/isp_files/icon_010.png
162.241.55.185200 OK 930 B URL HTTP/1.1 ministeriodapalavra.com/isp_files/icon_010.png
IP 162.241.55.185:0
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 30 x 28, 8-bit/color RGBA, non-interlaced\012- data
Hash 8786b476163b5626790111201de7a105
f432a249eac59b4a057f0ab2a34cfa99adc898c6
7a2b1b4bff76a3cb518c06ef6abbd483c60e5b2d6377020a6bf1198134ebb8ab
Analyzer Verdict Alert openphish Intesa Sanpaolo
GET /isp_files/icon_010.png HTTP/1.1
Host: ministeriodapalavra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ministeriodapalavra.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 14:37:15 GMT
Server: Apache
Last-Modified: Wed, 24 Feb 2021 16:51:22 GMT
Accept-Ranges: bytes
Content-Length: 930
Keep-Alive: timeout=5, max=88
Connection: Keep-Alive
Content-Type: image/png
ministeriodapalavra.com/isp_files/icon_011.png
162.241.55.185200 OK 780 B URL HTTP/1.1 ministeriodapalavra.com/isp_files/icon_011.png
IP 162.241.55.185:0
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 30 x 23, 8-bit/color RGBA, non-interlaced\012- data
Hash 25fc69e5b31244dd631227402ffd0f0a
f3ed167cbcaea621681f96214c5aab84c3cf6e9e
319ac41473da7a19b6f87692f3cdc4822a9b5283df3638fe88a38aa75b018f0b
Analyzer Verdict Alert openphish Intesa Sanpaolo
GET /isp_files/icon_011.png HTTP/1.1
Host: ministeriodapalavra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ministeriodapalavra.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 14:37:15 GMT
Server: Apache
Last-Modified: Wed, 24 Feb 2021 16:51:22 GMT
Accept-Ranges: bytes
Content-Length: 780
Keep-Alive: timeout=5, max=86
Connection: Keep-Alive
Content-Type: image/png
ministeriodapalavra.com/isp_files/icon_017.png
162.241.55.185200 OK 1.0 kB URL HTTP/1.1 ministeriodapalavra.com/isp_files/icon_017.png
IP 162.241.55.185:0
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 30 x 27, 8-bit/color RGBA, non-interlaced\012- data
Hash e386b810ca1b33a6e67d98b0e42324e7
e11d099289ef780c5770b532dd709c52fe64d11a
3b579671f0f852fb817840c791e1375fce7d12fe48589c41539e0811365020ba
Analyzer Verdict Alert openphish Intesa Sanpaolo
GET /isp_files/icon_017.png HTTP/1.1
Host: ministeriodapalavra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ministeriodapalavra.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 14:37:15 GMT
Server: Apache
Last-Modified: Wed, 24 Feb 2021 16:51:26 GMT
Accept-Ranges: bytes
Content-Length: 1023
Keep-Alive: timeout=5, max=88
Connection: Keep-Alive
Content-Type: image/png
ministeriodapalavra.com/isp_files/icon_015.png
162.241.55.185200 OK 702 B URL HTTP/1.1 ministeriodapalavra.com/isp_files/icon_015.png
IP 162.241.55.185:0
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 30 x 18, 8-bit/color RGBA, non-interlaced\012- data
Hash 0ecbc8cec38438e1f4883c26b97eb7e2
0c6d07f1cff42c4546455ec766259e85339bf3b8
d324d101d0340ef2a01fabab8d52815a08a51c0cfab63daf120b3db017b7b0e7
Analyzer Verdict Alert openphish Intesa Sanpaolo
GET /isp_files/icon_015.png HTTP/1.1
Host: ministeriodapalavra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ministeriodapalavra.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 14:37:15 GMT
Server: Apache
Last-Modified: Wed, 24 Feb 2021 16:51:24 GMT
Accept-Ranges: bytes
Content-Length: 702
Keep-Alive: timeout=5, max=91
Connection: Keep-Alive
Content-Type: image/png
ministeriodapalavra.com/isp_files/icon_022.png
162.241.55.185200 OK 287 B URL HTTP/1.1 ministeriodapalavra.com/isp_files/icon_022.png
IP 162.241.55.185:0
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 30 x 30, 8-bit/color RGBA, non-interlaced\012- data
Hash ab3808552bc16abc55d567419107656f
56eaeaddf34ca22e138a1508d69627bb40e66183
91a6750fa71fbea8f89e59574bac4dc7cd6e876bcfbd1c7b686d9b0b0fdbc8f1
Analyzer Verdict Alert openphish Intesa Sanpaolo
GET /isp_files/icon_022.png HTTP/1.1
Host: ministeriodapalavra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ministeriodapalavra.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 14:37:15 GMT
Server: Apache
Last-Modified: Wed, 24 Feb 2021 16:51:26 GMT
Accept-Ranges: bytes
Content-Length: 287
Keep-Alive: timeout=5, max=82
Connection: Keep-Alive
Content-Type: image/png
ministeriodapalavra.com/isp_files/icon_019.png
162.241.55.185200 OK 167 B URL HTTP/1.1 ministeriodapalavra.com/isp_files/icon_019.png
IP 162.241.55.185:0
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 30 x 20, 8-bit/color RGBA, non-interlaced\012- data
Hash 776289406505334eab6ebc26b187c164
87f9b31a036d253d608b93d8a201354ccf837889
9a53840587d6136185d7cb060cd712d59ddc559798f777aa3efd82ca3dc3cd39
Analyzer Verdict Alert openphish Intesa Sanpaolo
GET /isp_files/icon_019.png HTTP/1.1
Host: ministeriodapalavra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ministeriodapalavra.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 14:37:15 GMT
Server: Apache
Last-Modified: Wed, 24 Feb 2021 16:51:26 GMT
Accept-Ranges: bytes
Content-Length: 167
Keep-Alive: timeout=5, max=85
Connection: Keep-Alive
Content-Type: image/png
ministeriodapalavra.com/isp_files/icon_014.png
162.241.55.185200 OK 339 B URL HTTP/1.1 ministeriodapalavra.com/isp_files/icon_014.png
IP 162.241.55.185:0
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 30 x 30, 8-bit/color RGBA, non-interlaced\012- data
Hash 38e482d8b985ec8db8d6ca0f7d912a2d
10724764fc12023a9f7e32ef94850221b2eb2acd
5094d9a3dad176432afd916ee39939fc052891e93aa515c4aee0c8aec6393c01
Analyzer Verdict Alert openphish Intesa Sanpaolo
GET /isp_files/icon_014.png HTTP/1.1
Host: ministeriodapalavra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ministeriodapalavra.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 14:37:15 GMT
Server: Apache
Last-Modified: Wed, 24 Feb 2021 16:51:24 GMT
Accept-Ranges: bytes
Content-Length: 339
Keep-Alive: timeout=5, max=87
Connection: Keep-Alive
Content-Type: image/png
ministeriodapalavra.com/isp_files/icon_012.png
162.241.55.185200 OK 389 B URL HTTP/1.1 ministeriodapalavra.com/isp_files/icon_012.png
IP 162.241.55.185:0
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 30 x 30, 8-bit/color RGBA, non-interlaced\012- data
Hash 34c0bd611938d57ad5f54c770e5baea8
c159b129658b88217eae93bc1bafb8b058953e41
e9a9af06d3d336672d0826bfa5a4364f5784ff3e50f9a8723a8d53bb5c836831
Analyzer Verdict Alert openphish Intesa Sanpaolo
GET /isp_files/icon_012.png HTTP/1.1
Host: ministeriodapalavra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ministeriodapalavra.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 14:37:15 GMT
Server: Apache
Last-Modified: Wed, 24 Feb 2021 16:51:24 GMT
Accept-Ranges: bytes
Content-Length: 389
Keep-Alive: timeout=5, max=87
Connection: Keep-Alive
Content-Type: image/png
ministeriodapalavra.com/isp_files/icon_004.png
162.241.55.185200 OK 428 B URL HTTP/1.1 ministeriodapalavra.com/isp_files/icon_004.png
IP 162.241.55.185:0
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 30 x 26, 8-bit/color RGBA, non-interlaced\012- data
Hash 11e91593a166f018a4aa0916c7b73350
4ba63965fdd76a02b4d036f47c255f09e85ff39a
3e0f818be2f1c0bd47c08c179a0b3197877531fd05fdeeb347dd2d57688a3c78
Analyzer Verdict Alert openphish Intesa Sanpaolo
GET /isp_files/icon_004.png HTTP/1.1
Host: ministeriodapalavra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ministeriodapalavra.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 14:37:15 GMT
Server: Apache
Last-Modified: Wed, 24 Feb 2021 16:51:20 GMT
Accept-Ranges: bytes
Content-Length: 428
Keep-Alive: timeout=5, max=87
Connection: Keep-Alive
Content-Type: image/png
ministeriodapalavra.com/isp_files/icon_020.png
162.241.55.185200 OK 1.6 kB URL HTTP/1.1 ministeriodapalavra.com/isp_files/icon_020.png
IP 162.241.55.185:0
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 30 x 30, 8-bit/color RGBA, non-interlaced\012- data
Hash 2e717863b7c31ba33f14c2ee53111095
2e9aa87909ffba3c2f4733edd5c811d08c307d37
7eb9aabfb251336728d1db8891b0c04b8317679348d7fe66a019fb2451eb191e
Analyzer Verdict Alert openphish Intesa Sanpaolo
GET /isp_files/icon_020.png HTTP/1.1
Host: ministeriodapalavra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ministeriodapalavra.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 14:37:15 GMT
Server: Apache
Last-Modified: Wed, 24 Feb 2021 16:51:26 GMT
Accept-Ranges: bytes
Content-Length: 1559
Keep-Alive: timeout=5, max=90
Connection: Keep-Alive
Content-Type: image/png
ministeriodapalavra.com/isp_files/icon_008.png
162.241.55.185200 OK 1.6 kB URL HTTP/1.1 ministeriodapalavra.com/isp_files/icon_008.png
IP 162.241.55.185:0
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 30 x 30, 8-bit/color RGBA, non-interlaced\012- data
Hash 0a05d6251cb7b66ecbede227a1e59b12
2dc09f21115b7c4f1053f46e8346bcbf5b609f48
e8be3c5c3b09a632c4d35d1cd337bd69933d54ac6add4e309de16dfb1339fb8c
Analyzer Verdict Alert openphish Intesa Sanpaolo
GET /isp_files/icon_008.png HTTP/1.1
Host: ministeriodapalavra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ministeriodapalavra.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 14:37:15 GMT
Server: Apache
Last-Modified: Wed, 24 Feb 2021 16:51:22 GMT
Accept-Ranges: bytes
Content-Length: 1648
Keep-Alive: timeout=5, max=81
Connection: Keep-Alive
Content-Type: image/png
ministeriodapalavra.com/isp_files/icon_016.png
162.241.55.185200 OK 465 B URL HTTP/1.1 ministeriodapalavra.com/isp_files/icon_016.png
IP 162.241.55.185:0
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 30 x 19, 8-bit/color RGBA, non-interlaced\012- data
Hash cd67645db5d17d449cd2e41dd931ee4d
153aba2bcd0fa0c734dad14fbf35115b4f7f2172
f81495d9c07fb23b2156b9a00879e506834d185eb68af2d7614ddf07efedcfce
Analyzer Verdict Alert openphish Intesa Sanpaolo
GET /isp_files/icon_016.png HTTP/1.1
Host: ministeriodapalavra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ministeriodapalavra.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 14:37:15 GMT
Server: Apache
Last-Modified: Wed, 24 Feb 2021 16:51:24 GMT
Accept-Ranges: bytes
Content-Length: 465
Keep-Alive: timeout=5, max=84
Connection: Keep-Alive
Content-Type: image/png
ministeriodapalavra.com/isp_files/icon_023.png
162.241.55.185200 OK 268 B URL HTTP/1.1 ministeriodapalavra.com/isp_files/icon_023.png
IP 162.241.55.185:0
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 30 x 30, 8-bit/color RGBA, non-interlaced\012- data
Hash a2f2b84984db06a94a34e3546eedddfd
a07408c53d42caaaa4d4be72f9eec9e2d3fbc56d
109627a1f5a791d10fd2b8604378e8ff6687f68c717ff8c92aeb7963471293ef
Analyzer Verdict Alert openphish Intesa Sanpaolo
GET /isp_files/icon_023.png HTTP/1.1
Host: ministeriodapalavra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ministeriodapalavra.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 14:37:15 GMT
Server: Apache
Last-Modified: Wed, 24 Feb 2021 16:51:28 GMT
Accept-Ranges: bytes
Content-Length: 268
Keep-Alive: timeout=5, max=86
Connection: Keep-Alive
Content-Type: image/png
ministeriodapalavra.com/isp_files/icon_007.png
162.241.55.185200 OK 769 B URL HTTP/1.1 ministeriodapalavra.com/isp_files/icon_007.png
IP 162.241.55.185:0
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 30 x 35, 8-bit/color RGBA, non-interlaced\012- data
Hash e46bd471bd30126c3da601d9d94b9655
81bfcc60c7ac3f6324d676ca948c25b9b7d8730d
de06f4ebd0f89a97e88aaf43f277bfe3fd14727e9d57370c0b65faaf7940f656
Analyzer Verdict Alert openphish Intesa Sanpaolo
GET /isp_files/icon_007.png HTTP/1.1
Host: ministeriodapalavra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ministeriodapalavra.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 14:37:15 GMT
Server: Apache
Last-Modified: Wed, 24 Feb 2021 16:51:20 GMT
Accept-Ranges: bytes
Content-Length: 769
Keep-Alive: timeout=5, max=86
Connection: Keep-Alive
Content-Type: image/png
ministeriodapalavra.com/isp_files/lock-mobile.png
162.241.55.185200 OK 1.3 kB URL HTTP/1.1 ministeriodapalavra.com/isp_files/lock-mobile.png
IP 162.241.55.185:0
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 30 x 70, 8-bit/color RGBA, non-interlaced\012- data
Hash 1878dc1bd179a8e3039c24b85fbd30ae
dd19f60f5e1c144438e2cd33ce75fe54d9ee654e
84266c4ff297f1fe0c23a7c1d5d294535ea69b535d7087e2364324da4bd9aeee
Analyzer Verdict Alert openphish Intesa Sanpaolo
GET /isp_files/lock-mobile.png HTTP/1.1
Host: ministeriodapalavra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ministeriodapalavra.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 14:37:16 GMT
Server: Apache
Last-Modified: Wed, 24 Feb 2021 16:51:28 GMT
Accept-Ranges: bytes
Content-Length: 1334
Keep-Alive: timeout=5, max=86
Connection: Keep-Alive
Content-Type: image/png
ministeriodapalavra.com/isp_files/ico-burger-mob.png
162.241.55.185200 OK 1.1 kB URL HTTP/1.1 ministeriodapalavra.com/isp_files/ico-burger-mob.png
IP 162.241.55.185:0
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 90 x 90, 8-bit/color RGBA, non-interlaced\012- data
Hash d27508c6b9dfeebeb76a1435d6b67f6f
471df94af969bb27fa556d36ff9955301fec1de0
2ed7d3df8b8695db881df15bbb972b5c9d3a61395ec890340da50a21a07ec7af
Analyzer Verdict Alert openphish Intesa Sanpaolo
GET /isp_files/ico-burger-mob.png HTTP/1.1
Host: ministeriodapalavra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ministeriodapalavra.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 14:37:16 GMT
Server: Apache
Last-Modified: Wed, 24 Feb 2021 16:51:18 GMT
Accept-Ranges: bytes
Content-Length: 1087
Keep-Alive: timeout=5, max=89
Connection: Keep-Alive
Content-Type: image/png
ministeriodapalavra.com/content/dam/vetrina/mock/banks-list.json
162.241.55.185404 Not Found 315 B URL HTTP/1.1 ministeriodapalavra.com/content/dam/vetrina/mock/banks-list.json
IP 162.241.55.185:0
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
Analyzer Verdict Alert openphish Intesa Sanpaolo
fortinet Phishing
GET /content/dam/vetrina/mock/banks-list.json HTTP/1.1
Host: ministeriodapalavra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ministeriodapalavra.com/
Cookie: utag_main=v_id:0184dd91e375008399069d4897e000050002000900918$_sn:1$_ss:0$_pn:2%3Bexp-session$_st:1670166437172$ses_id:1670164636533%3Bexp-session$vapi_domain:ministeriodapalavra.com; AMCV_761F7500590204020A495ED3%40AdobeOrg=1585540135%7CMCIDTS%7C19331%7CvVersion%7C4.4.0; _omappvp=sDpL8GQOCr2b7x9hq29vETwWgwBt25jzFU9c2dd6GKl9LegoHYChiOV0Dfj7Zc49KzQUdbRphz4j0Qgh0355uUVtlJ01U3Ww; _omappvs=1670164637484; _ga=GA1.2.948656355.1670164638; _gid=GA1.2.1067199240.1670164638; _gat=1; actualSection=persona-e-famiglia; WTLOPTOUT=session; IntesaSanpaolo_NoCookie=session
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 404 Not Found
Date: Sun, 04 Dec 2022 14:37:16 GMT
Server: Apache
Content-Length: 315
Keep-Alive: timeout=5, max=80
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
ministeriodapalavra.com/isp_files/Home-Computer-Business.jpg
162.241.55.185200 OK 191 kB URL HTTP/1.1 ministeriodapalavra.com/isp_files/Home-Computer-Business.jpg
IP 162.241.55.185:0
ASN #46606 UNIFIEDLAYER-AS-1
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 3116x1173, components 3\012- data
Size 191 kB (190675 bytes)
Hash 3b90373ce2b57fd76f4f4621e4e889b3
64fe2758c80cc845ed3482afd84e7b84b68863a8
d5151538b1873c65f9dcff7a39b5624adfe6c44f059cad333e600bcf7a2a40a0
Analyzer Verdict Alert openphish Intesa Sanpaolo
GET /isp_files/Home-Computer-Business.jpg HTTP/1.1
Host: ministeriodapalavra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ministeriodapalavra.com/
Cookie: utag_main=v_id:0184dd91e375008399069d4897e000050002000900918$_sn:1$_ss:0$_pn:2%3Bexp-session$_st:1670166437172$ses_id:1670164636533%3Bexp-session$vapi_domain:ministeriodapalavra.com; AMCV_761F7500590204020A495ED3%40AdobeOrg=1585540135%7CMCIDTS%7C19331%7CvVersion%7C4.4.0; _omappvp=sDpL8GQOCr2b7x9hq29vETwWgwBt25jzFU9c2dd6GKl9LegoHYChiOV0Dfj7Zc49KzQUdbRphz4j0Qgh0355uUVtlJ01U3Ww; _omappvs=1670164637484; _ga=GA1.2.948656355.1670164638; _gid=GA1.2.1067199240.1670164638; _gat=1; actualSection=persona-e-famiglia
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 14:37:16 GMT
Server: Apache
Last-Modified: Thu, 25 Feb 2021 16:35:14 GMT
Accept-Ranges: bytes
Content-Length: 190675
Keep-Alive: timeout=5, max=83
Connection: Keep-Alive
Content-Type: image/jpeg
ministeriodapalavra.com/isp_files/ico-lock-mob.png
162.241.55.185200 OK 1.4 kB URL HTTP/1.1 ministeriodapalavra.com/isp_files/ico-lock-mob.png
IP 162.241.55.185:0
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 90 x 90, 8-bit/color RGBA, non-interlaced\012- data
Hash cf61cb731e5cd5678710553775eaa44e
89e003c9462054cae899f67fc7852d84ab74dba5
f224f63f26dc4e34bdff81e55d12c78a5657c707d1cf60bc4a99a99cf6667dd5
Analyzer Verdict Alert openphish Intesa Sanpaolo
GET /isp_files/ico-lock-mob.png HTTP/1.1
Host: ministeriodapalavra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ministeriodapalavra.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 14:37:16 GMT
Server: Apache
Last-Modified: Wed, 24 Feb 2021 16:51:18 GMT
Accept-Ranges: bytes
Content-Length: 1442
Keep-Alive: timeout=5, max=85
Connection: Keep-Alive
Content-Type: image/png
ministeriodapalavra.com/isp_files/ico-search-mob.png
162.241.55.185200 OK 1.4 kB URL HTTP/1.1 ministeriodapalavra.com/isp_files/ico-search-mob.png
IP 162.241.55.185:0
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 90 x 90, 8-bit/color RGBA, non-interlaced\012- data
Hash 5c14f42e099f4533b9075e3dd5b2b351
ce590494b780ae735851c3ee5f471299e75a550d
4eb5c5e47a8aed23a202e0ca94d3757d328b87c839ac926c61020d3dfcf3039d
Analyzer Verdict Alert openphish Intesa Sanpaolo
GET /isp_files/ico-search-mob.png HTTP/1.1
Host: ministeriodapalavra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ministeriodapalavra.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 14:37:16 GMT
Server: Apache
Last-Modified: Wed, 24 Feb 2021 16:51:18 GMT
Accept-Ranges: bytes
Content-Length: 1441
Keep-Alive: timeout=5, max=85
Connection: Keep-Alive
Content-Type: image/png
ministeriodapalavra.com/isp_files/close-cookie.png
162.241.55.185200 OK 313 B URL HTTP/1.1 ministeriodapalavra.com/isp_files/close-cookie.png
IP 162.241.55.185:0
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 30 x 30, 8-bit/color RGBA, non-interlaced\012- data
Hash 363e68295b9fca8f40374b01aa9db6eb
9d10e6a226113aaf69d906defc384a9b9fd5c10c
3428070ba9de1802698ea29826428628eab543de85c20e50e076e1a316606790
Analyzer Verdict Alert openphish Intesa Sanpaolo
GET /isp_files/close-cookie.png HTTP/1.1
Host: ministeriodapalavra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ministeriodapalavra.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 14:37:16 GMT
Server: Apache
Last-Modified: Wed, 24 Feb 2021 16:51:10 GMT
Accept-Ranges: bytes
Content-Length: 313
Keep-Alive: timeout=5, max=85
Connection: Keep-Alive
Content-Type: image/png
ministeriodapalavra.com/isp_files/tool-gal-ico.png
162.241.55.185200 OK 1.6 kB URL HTTP/1.1 ministeriodapalavra.com/isp_files/tool-gal-ico.png
IP 162.241.55.185:0
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 315 x 24, 8-bit/color RGBA, non-interlaced\012- data
Hash 7bbda1a73109123e492134a89b3524fd
981797657e4e03a4cb0a5855fa1de97a94faf77c
af13859e6c4fa7910d13f78d99dfb525908d4f21b4341895e9da0232619184e6
Analyzer Verdict Alert openphish Intesa Sanpaolo
GET /isp_files/tool-gal-ico.png HTTP/1.1
Host: ministeriodapalavra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ministeriodapalavra.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 14:37:16 GMT
Server: Apache
Last-Modified: Wed, 24 Feb 2021 16:51:36 GMT
Accept-Ranges: bytes
Content-Length: 1609
Keep-Alive: timeout=5, max=88
Connection: Keep-Alive
Content-Type: image/png
ministeriodapalavra.com/isp_files/acc-hide-mobile.png
162.241.55.185200 OK 3.2 kB URL HTTP/1.1 ministeriodapalavra.com/isp_files/acc-hide-mobile.png
IP 162.241.55.185:0
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 77 x 76, 8-bit/color RGBA, non-interlaced\012- data
Hash 6396d65afc34a7989461099bb0072e99
d76fbd4a1d70a6fe1e7d6f34ee5ba61ed8e3baa0
173f71531eaa3fefa888c0c92cfac551e7b27007029ab36a127e5f3232510b8a
Analyzer Verdict Alert openphish Intesa Sanpaolo
GET /isp_files/acc-hide-mobile.png HTTP/1.1
Host: ministeriodapalavra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ministeriodapalavra.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 14:37:16 GMT
Server: Apache
Last-Modified: Wed, 24 Feb 2021 16:51:02 GMT
Accept-Ranges: bytes
Content-Length: 3214
Keep-Alive: timeout=5, max=79
Connection: Keep-Alive
Content-Type: image/png
ministeriodapalavra.com/isp_files/acc-show-mobile.png
162.241.55.185200 OK 2.5 kB URL HTTP/1.1 ministeriodapalavra.com/isp_files/acc-show-mobile.png
IP 162.241.55.185:0
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 77 x 76, 8-bit/color RGBA, non-interlaced\012- data
Hash 8bfcfb986c4de70ce6ec602168d856fa
cc7bc984c5506dd079a5c6358cb36cd73f0e0167
1aec5219cdcd75f87dfe65e36a8d4b860ac03b5573e6c9a2739b119e5defe63e
Analyzer Verdict Alert openphish Intesa Sanpaolo
GET /isp_files/acc-show-mobile.png HTTP/1.1
Host: ministeriodapalavra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ministeriodapalavra.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 14:37:16 GMT
Server: Apache
Last-Modified: Wed, 24 Feb 2021 16:51:02 GMT
Accept-Ranges: bytes
Content-Length: 2537
Keep-Alive: timeout=5, max=82
Connection: Keep-Alive
Content-Type: image/png
ministeriodapalavra.com/isp_files/icon_013.png
162.241.55.185200 OK 798 B URL HTTP/1.1 ministeriodapalavra.com/isp_files/icon_013.png
IP 162.241.55.185:0
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 30 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash cd798ec622a5777f4ff2d6ab69ed5fb4
d2a5eb4ad8511ad8be2840a10d2fa589f53fbd39
478c49aa9a07383978500bc901b5650a76489d4077385bbb0fe2bda16ee69519
Analyzer Verdict Alert openphish Intesa Sanpaolo
GET /isp_files/icon_013.png HTTP/1.1
Host: ministeriodapalavra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ministeriodapalavra.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 14:37:16 GMT
Server: Apache
Last-Modified: Wed, 24 Feb 2021 16:51:24 GMT
Accept-Ranges: bytes
Content-Length: 798
Keep-Alive: timeout=5, max=84
Connection: Keep-Alive
Content-Type: image/png
ministeriodapalavra.com/isp_files/icon_003.png
162.241.55.185200 OK 681 B URL HTTP/1.1 ministeriodapalavra.com/isp_files/icon_003.png
IP 162.241.55.185:0
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 30 x 33, 8-bit/color RGBA, non-interlaced\012- data
Hash cb988be4f45959a69e3546743355a8cc
802ff7cde193725a5195cb240f63f81cb77979b5
52e66c1b321087253378e5b6dfa5d525a614cdbb3c9973d5cf159ac0d32ecb3f
Analyzer Verdict Alert openphish Intesa Sanpaolo
GET /isp_files/icon_003.png HTTP/1.1
Host: ministeriodapalavra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ministeriodapalavra.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 14:37:16 GMT
Server: Apache
Last-Modified: Wed, 24 Feb 2021 16:51:20 GMT
Accept-Ranges: bytes
Content-Length: 681
Keep-Alive: timeout=5, max=84
Connection: Keep-Alive
Content-Type: image/png
ministeriodapalavra.com/isp_files/icon_021.png
162.241.55.185200 OK 711 B URL HTTP/1.1 ministeriodapalavra.com/isp_files/icon_021.png
IP 162.241.55.185:0
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 30 x 34, 8-bit/color RGBA, non-interlaced\012- data
Hash 13fb65bbf6b71f371734ffcb77eee65c
86c35972ce92ad5e9d2672600e953df51bf6b923
a5e253bb0c4b8566cb8ef1cb425b4b24e00853927a468e8a626ca4da1be73312
Analyzer Verdict Alert openphish Intesa Sanpaolo
GET /isp_files/icon_021.png HTTP/1.1
Host: ministeriodapalavra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ministeriodapalavra.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 14:37:16 GMT
Server: Apache
Last-Modified: Wed, 24 Feb 2021 16:51:26 GMT
Accept-Ranges: bytes
Content-Length: 711
Keep-Alive: timeout=5, max=84
Connection: Keep-Alive
Content-Type: image/png
ministeriodapalavra.com/content/vetrina/it.logindesk.html
162.241.55.185404 Not Found 315 B URL HTTP/1.1 ministeriodapalavra.com/content/vetrina/it.logindesk.html
IP 162.241.55.185:0
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
Analyzer Verdict Alert openphish Intesa Sanpaolo
fortinet Phishing
GET /content/vetrina/it.logindesk.html HTTP/1.1
Host: ministeriodapalavra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ministeriodapalavra.com/
Cookie: utag_main=v_id:0184dd91e375008399069d4897e000050002000900918$_sn:1$_ss:0$_pn:2%3Bexp-session$_st:1670166437172$ses_id:1670164636533%3Bexp-session$vapi_domain:ministeriodapalavra.com; AMCV_761F7500590204020A495ED3%40AdobeOrg=1585540135%7CMCIDTS%7C19331%7CvVersion%7C4.4.0; _omappvp=sDpL8GQOCr2b7x9hq29vETwWgwBt25jzFU9c2dd6GKl9LegoHYChiOV0Dfj7Zc49KzQUdbRphz4j0Qgh0355uUVtlJ01U3Ww; _omappvs=1670164637484; _ga=GA1.2.948656355.1670164638; _gid=GA1.2.1067199240.1670164638; _gat=1; actualSection=persona-e-famiglia; WTLOPTOUT=session; IntesaSanpaolo_NoCookie=session
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 404 Not Found
Date: Sun, 04 Dec 2022 14:37:16 GMT
Server: Apache
Content-Length: 315
Keep-Alive: timeout=5, max=87
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
ministeriodapalavra.com/ib/public/guestarea/styles/app.css?v=b1e0de6
162.241.55.185404 Not Found 315 B URL HTTP/1.1 ministeriodapalavra.com/ib/public/guestarea/styles/app.css?v=b1e0de6
IP 162.241.55.185:0
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
Analyzer Verdict Alert openphish Intesa Sanpaolo
fortinet Phishing
GET /ib/public/guestarea/styles/app.css?v=b1e0de6 HTTP/1.1
Host: ministeriodapalavra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ministeriodapalavra.com/
Cookie: utag_main=v_id:0184dd91e375008399069d4897e000050002000900918$_sn:1$_ss:0$_pn:2%3Bexp-session$_st:1670166437172$ses_id:1670164636533%3Bexp-session$vapi_domain:ministeriodapalavra.com; AMCV_761F7500590204020A495ED3%40AdobeOrg=1585540135%7CMCIDTS%7C19331%7CvVersion%7C4.4.0; _omappvp=sDpL8GQOCr2b7x9hq29vETwWgwBt25jzFU9c2dd6GKl9LegoHYChiOV0Dfj7Zc49KzQUdbRphz4j0Qgh0355uUVtlJ01U3Ww; _omappvs=1670164637484; _ga=GA1.2.948656355.1670164638; _gid=GA1.2.1067199240.1670164638; _gat=1; actualSection=persona-e-famiglia; WTLOPTOUT=session; IntesaSanpaolo_NoCookie=session
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 404 Not Found
Date: Sun, 04 Dec 2022 14:37:16 GMT
Server: Apache
Content-Length: 315
Keep-Alive: timeout=5, max=78
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
ministeriodapalavra.com/ib/public/guestarea/scripts/vendor.js?v=b1e0de6
162.241.55.185404 Not Found 315 B URL HTTP/1.1 ministeriodapalavra.com/ib/public/guestarea/scripts/vendor.js?v=b1e0de6
IP 162.241.55.185:0
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
Analyzer Verdict Alert openphish Intesa Sanpaolo
fortinet Phishing
GET /ib/public/guestarea/scripts/vendor.js?v=b1e0de6 HTTP/1.1
Host: ministeriodapalavra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ministeriodapalavra.com/
Cookie: utag_main=v_id:0184dd91e375008399069d4897e000050002000900918$_sn:1$_ss:0$_pn:2%3Bexp-session$_st:1670166437172$ses_id:1670164636533%3Bexp-session$vapi_domain:ministeriodapalavra.com; AMCV_761F7500590204020A495ED3%40AdobeOrg=1585540135%7CMCIDTS%7C19331%7CvVersion%7C4.4.0; _omappvp=sDpL8GQOCr2b7x9hq29vETwWgwBt25jzFU9c2dd6GKl9LegoHYChiOV0Dfj7Zc49KzQUdbRphz4j0Qgh0355uUVtlJ01U3Ww; _omappvs=1670164637484; _ga=GA1.2.948656355.1670164638; _gid=GA1.2.1067199240.1670164638; _gat=1; actualSection=persona-e-famiglia; WTLOPTOUT=session; IntesaSanpaolo_NoCookie=session
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 404 Not Found
Date: Sun, 04 Dec 2022 14:37:16 GMT
Server: Apache
Content-Length: 315
Keep-Alive: timeout=5, max=81
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
ministeriodapalavra.com/isp_files/icon_006.png
162.241.55.185200 OK 900 B URL HTTP/1.1 ministeriodapalavra.com/isp_files/icon_006.png
IP 162.241.55.185:0
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 30 x 38, 8-bit/color RGBA, non-interlaced\012- data
Hash be00ed5d688cc89e1ed88c5d19b6112a
5584f034996cf2f921fedff53d0378212d52eb01
c14456513f21407b2fb73f0a5e44ba8b93d868c084dcf27bc7b2cb08d750494d
Analyzer Verdict Alert openphish Intesa Sanpaolo
GET /isp_files/icon_006.png HTTP/1.1
Host: ministeriodapalavra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ministeriodapalavra.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 14:37:16 GMT
Server: Apache
Last-Modified: Wed, 24 Feb 2021 16:51:20 GMT
Accept-Ranges: bytes
Content-Length: 900
Keep-Alive: timeout=5, max=83
Connection: Keep-Alive
Content-Type: image/png
ministeriodapalavra.com/ib/public/guestarea/scripts/app.js?v=b1e0de6
162.241.55.185404 Not Found 315 B URL HTTP/1.1 ministeriodapalavra.com/ib/public/guestarea/scripts/app.js?v=b1e0de6
IP 162.241.55.185:0
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
Analyzer Verdict Alert openphish Intesa Sanpaolo
fortinet Phishing
GET /ib/public/guestarea/scripts/app.js?v=b1e0de6 HTTP/1.1
Host: ministeriodapalavra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ministeriodapalavra.com/
Cookie: utag_main=v_id:0184dd91e375008399069d4897e000050002000900918$_sn:1$_ss:0$_pn:2%3Bexp-session$_st:1670166437172$ses_id:1670164636533%3Bexp-session$vapi_domain:ministeriodapalavra.com; AMCV_761F7500590204020A495ED3%40AdobeOrg=1585540135%7CMCIDTS%7C19331%7CvVersion%7C4.4.0; _omappvp=sDpL8GQOCr2b7x9hq29vETwWgwBt25jzFU9c2dd6GKl9LegoHYChiOV0Dfj7Zc49KzQUdbRphz4j0Qgh0355uUVtlJ01U3Ww; _omappvs=1670164637484; _ga=GA1.2.948656355.1670164638; _gid=GA1.2.1067199240.1670164638; _gat=1; actualSection=persona-e-famiglia; WTLOPTOUT=session; IntesaSanpaolo_NoCookie=session
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 404 Not Found
Date: Sun, 04 Dec 2022 14:37:16 GMT
Server: Apache
Content-Length: 315
Keep-Alive: timeout=5, max=83
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
intesasanpaolo.d3.sc.omtrdc.net/id?d_visid_ver=4.4.0&d_fieldgroup=MC&mcorgid=761F7500590204020A495ED3%40AdobeOrg&ts=1670164638648
15.188.95.229200 OK 2 B URL HTTP/2 intesasanpaolo.d3.sc.omtrdc.net/id?d_visid_ver=4.4.0&d_fieldgroup=MC&mcorgid=761F7500590204020A495ED3%40AdobeOrg&ts=1670164638648
IP 15.188.95.229:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 99914b932bd37a50b983c5e7c90ae93b
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
GET /id?d_visid_ver=4.4.0&d_fieldgroup=MC&mcorgid=761F7500590204020A495ED3%40AdobeOrg&ts=1670164638648 HTTP/1.1
Host: intesasanpaolo.d3.sc.omtrdc.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Origin: https://ministeriodapalavra.com
Connection: keep-alive
Referer: https://ministeriodapalavra.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://ministeriodapalavra.com
access-control-allow-credentials: true
date: Sun, 04 Dec 2022 14:37:21 GMT
p3p: CP="This is not a P3P policy"
server: jag
vary: Origin
content-type: application/x-javascript;charset=utf-8
content-length: 2
cache-control: no-cache, no-store, max-age=0, no-transform, private
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
intesasanpaolo.d3.sc.omtrdc.net/id?d_visid_ver=4.4.0&d_fieldgroup=A&mcorgid=761F7500590204020A495ED3%40AdobeOrg&mid=62929708510729805045293041592367326059&ts=1670164638651
15.188.95.229200 OK 2 B URL HTTP/2 intesasanpaolo.d3.sc.omtrdc.net/id?d_visid_ver=4.4.0&d_fieldgroup=A&mcorgid=761F7500590204020A495ED3%40AdobeOrg&mid=62929708510729805045293041592367326059&ts=1670164638651
IP 15.188.95.229:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 99914b932bd37a50b983c5e7c90ae93b
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
GET /id?d_visid_ver=4.4.0&d_fieldgroup=A&mcorgid=761F7500590204020A495ED3%40AdobeOrg&mid=62929708510729805045293041592367326059&ts=1670164638651 HTTP/1.1
Host: intesasanpaolo.d3.sc.omtrdc.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Origin: https://ministeriodapalavra.com
Connection: keep-alive
Referer: https://ministeriodapalavra.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://ministeriodapalavra.com
access-control-allow-credentials: true
date: Sun, 04 Dec 2022 14:37:21 GMT
p3p: CP="This is not a P3P policy"
server: jag
vary: Origin
content-type: application/x-javascript;charset=utf-8
content-length: 2
cache-control: no-cache, no-store, max-age=0, no-transform, private
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
ministeriodapalavra.com/isp_files/icon_025.png
162.241.55.185200 OK 661 B URL HTTP/1.1 ministeriodapalavra.com/isp_files/icon_025.png
IP 162.241.55.185:0
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 35 x 29, 8-bit/color RGBA, non-interlaced\012- data
Hash 1925984e52c6f2ec12ea89c78a0f89fa
30d2e4965e0560ae82182806d780bacd5d243743
5de37a1fe078804b30beff475e96731b604de1d4487b207f12821acb1fb7e75a
Analyzer Verdict Alert openphish Intesa Sanpaolo
GET /isp_files/icon_025.png HTTP/1.1
Host: ministeriodapalavra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ministeriodapalavra.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 14:37:16 GMT
Server: Apache
Last-Modified: Wed, 24 Feb 2021 16:51:28 GMT
Accept-Ranges: bytes
Content-Length: 661
Keep-Alive: timeout=5, max=83
Connection: Keep-Alive
Content-Type: image/png
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 2dabd839729e9b0fb2558253d850126b
64f617aa0afb52168ef3519a4cf9829ac61ee007
1a47e4d0efdac6fbec990e3e168bfdfe615ff8953158773e8b1940d4d91eee18
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 14:37:21 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ministeriodapalavra.com/content/internetbanking/it/faq/common.vetrinasearchfaqgal.json
162.241.55.185404 Not Found 315 B URL HTTP/1.1 ministeriodapalavra.com/content/internetbanking/it/faq/common.vetrinasearchfaqgal.json
IP 162.241.55.185:0
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
Analyzer Verdict Alert openphish Intesa Sanpaolo
fortinet Phishing
GET /content/internetbanking/it/faq/common.vetrinasearchfaqgal.json HTTP/1.1
Host: ministeriodapalavra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ministeriodapalavra.com/
Cookie: utag_main=v_id:0184dd91e375008399069d4897e000050002000900918$_sn:1$_ss:0$_pn:2%3Bexp-session$_st:1670166437172$ses_id:1670164636533%3Bexp-session$vapi_domain:ministeriodapalavra.com; AMCV_761F7500590204020A495ED3%40AdobeOrg=1585540135%7CMCIDTS%7C19331%7CvVersion%7C4.4.0; _omappvp=sDpL8GQOCr2b7x9hq29vETwWgwBt25jzFU9c2dd6GKl9LegoHYChiOV0Dfj7Zc49KzQUdbRphz4j0Qgh0355uUVtlJ01U3Ww; _omappvs=1670164637484; _ga=GA1.2.948656355.1670164638; _gid=GA1.2.1067199240.1670164638; _gat=1; actualSection=persona-e-famiglia; WTLOPTOUT=session; IntesaSanpaolo_NoCookie=session
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 404 Not Found
Date: Sun, 04 Dec 2022 14:37:16 GMT
Server: Apache
Content-Length: 315
Keep-Alive: timeout=5, max=86
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-10701068-1&cid=948656355.1670164638&jid=866152360&gjid=429470637&_gid=1067199240.1670164638&_u=IEBAAEAAAAAAACAAI~&z=1268959996
108.177.14.156200 OK 4 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-10701068-1&cid=948656355.1670164638&jid=866152360&gjid=429470637&_gid=1067199240.1670164638&_u=IEBAAEAAAAAAACAAI~&z=1268959996
IP 108.177.14.156:0
File type ASCII text, with no line terminators
Hash 48c0473b7821185d937e685216e2168b
3743e47f8a429a5e87b86cb582d78940733d9d2e
570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-10701068-1&cid=948656355.1670164638&jid=866152360&gjid=429470637&_gid=1067199240.1670164638&_u=IEBAAEAAAAAAACAAI~&z=1268959996 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://ministeriodapalavra.com
Connection: keep-alive
Referer: https://ministeriodapalavra.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://ministeriodapalavra.com
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Sun, 04 Dec 2022 14:37:21 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ministeriodapalavra.com/isp_files/icon_002.png
162.241.55.185200 OK 417 B URL HTTP/1.1 ministeriodapalavra.com/isp_files/icon_002.png
IP 162.241.55.185:0
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 32 x 30, 8-bit/color RGBA, non-interlaced\012- data
Hash fcb17cf1047ba4170838c3b99395a848
244c2c2f21d879c4e944e66180100d951c177f92
8a3b5c38fe7253539f893b989c0973c8f8e9fffd11d470e258773e389919c5e6
Analyzer Verdict Alert openphish Intesa Sanpaolo
GET /isp_files/icon_002.png HTTP/1.1
Host: ministeriodapalavra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ministeriodapalavra.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 14:37:16 GMT
Server: Apache
Last-Modified: Wed, 24 Feb 2021 16:51:18 GMT
Accept-Ranges: bytes
Content-Length: 417
Keep-Alive: timeout=5, max=77
Connection: Keep-Alive
Content-Type: image/png
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash fd0b48347644ddc60fb16b04140cfcb7
ef8d6c8e3c979e98c82655290150aa14fe5d44d1
f3d27c16653ed979a7cce2dc6239a48a86c7dab2fc34949b540802e50b05275a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4992
Cache-Control: max-age=106882
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 14:37:21 GMT
Etag: "638b9ba3-1d7"
Expires: Mon, 05 Dec 2022 20:18:43 GMT
Last-Modified: Sat, 03 Dec 2022 18:55:31 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 471
ministeriodapalavra.com/isp_files/icon_009.png
162.241.55.185200 OK 898 B URL HTTP/1.1 ministeriodapalavra.com/isp_files/icon_009.png
IP 162.241.55.185:0
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 58 x 70, 8-bit/color RGBA, non-interlaced\012- data
Hash 9fe49c46bd70c432b1cc5fa16b2eeda0
d136d4aeba48d32fc1e83110bd7d4b0d73813785
d4e7da2a85fd1a67b9aa5a335b2593cd726856733129fc770edd43ad69bfb822
Analyzer Verdict Alert openphish Intesa Sanpaolo
GET /isp_files/icon_009.png HTTP/1.1
Host: ministeriodapalavra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ministeriodapalavra.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 14:37:16 GMT
Server: Apache
Last-Modified: Wed, 24 Feb 2021 16:51:22 GMT
Accept-Ranges: bytes
Content-Length: 898
Keep-Alive: timeout=5, max=80
Connection: Keep-Alive
Content-Type: image/png
ministeriodapalavra.com/isp_files/icon_024.png
162.241.55.185200 OK 2.1 kB URL HTTP/1.1 ministeriodapalavra.com/isp_files/icon_024.png
IP 162.241.55.185:0
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 39 x 33, 8-bit/color RGBA, non-interlaced\012- data
Hash 765895c7c36d25b3e9fab1fbbd0e9141
eb18fc417926909986d91ce68d601dc3ce93669d
928b0b6e08c035315069aa10d57aa64a61ef893dae42e33fee7c8d40dc2c1d04
Analyzer Verdict Alert openphish Intesa Sanpaolo
GET /isp_files/icon_024.png HTTP/1.1
Host: ministeriodapalavra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ministeriodapalavra.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 14:37:16 GMT
Server: Apache
Last-Modified: Wed, 24 Feb 2021 16:51:28 GMT
Accept-Ranges: bytes
Content-Length: 2088
Keep-Alive: timeout=5, max=82
Connection: Keep-Alive
Content-Type: image/png
ministeriodapalavra.com/isp_files/icon.png
162.241.55.185200 OK 2.3 kB URL HTTP/1.1 ministeriodapalavra.com/isp_files/icon.png
IP 162.241.55.185:0
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 58 x 70, 8-bit/color RGBA, interlaced\012- data
Hash 51c277d3dc61b5e328ce22b0788f239c
616527e6ac2cfde61d21e58d2eefb5edff44407c
19642c4f1cd0daa88e25d98a184cffee87c5f4011d08c34e51bb59074cf831fc
Analyzer Verdict Alert openphish Intesa Sanpaolo
GET /isp_files/icon.png HTTP/1.1
Host: ministeriodapalavra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ministeriodapalavra.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 14:37:16 GMT
Server: Apache
Last-Modified: Wed, 24 Feb 2021 16:51:18 GMT
Accept-Ranges: bytes
Content-Length: 2344
Keep-Alive: timeout=5, max=82
Connection: Keep-Alive
Content-Type: image/png
www.gstatic.com/recaptcha/releases/qpy2aGtSgsYPZzCoYWjcaBCo/recaptcha__en.js
142.250.74.3404 Not Found 1.6 kB URL HTTP/2 www.gstatic.com/recaptcha/releases/qpy2aGtSgsYPZzCoYWjcaBCo/recaptcha__en.js
IP 142.250.74.3:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1136)
Hash 9402839d8e77550a03f58eeaaa3bf669
1210257ae431909d30981eb0762539a3e208875c
adcfce05f4916ffbd1345a1964aabb040c7c8a635d3e13bfa9938a5c1f99f4c2
GET /recaptcha/releases/qpy2aGtSgsYPZzCoYWjcaBCo/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ministeriodapalavra.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 404 Not Found
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
date: Sun, 04 Dec 2022 14:37:21 GMT
content-type: text/html; charset=UTF-8
server: sffe
content-length: 1621
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 2dabd839729e9b0fb2558253d850126b
64f617aa0afb52168ef3519a4cf9829ac61ee007
1a47e4d0efdac6fbec990e3e168bfdfe615ff8953158773e8b1940d4d91eee18
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 14:37:21 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ministeriodapalavra.com/isp_files/icon_018.png
162.241.55.185200 OK 1.5 kB URL HTTP/1.1 ministeriodapalavra.com/isp_files/icon_018.png
IP 162.241.55.185:0
ASN #46606 UNIFIEDLAYER-AS-1
File type PNG image data, 39 x 33, 8-bit/color RGBA, non-interlaced\012- data
Hash 8f53e849de1c9e79db4b95a4eb1316b9
b35a58cc9a56e8fc3673225c39f5192a577c4f56
8db880747b327bc01d6ef7ba5efc67bf3ad43a4c9efbb147084f425b9359d148
Analyzer Verdict Alert openphish Intesa Sanpaolo
GET /isp_files/icon_018.png HTTP/1.1
Host: ministeriodapalavra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ministeriodapalavra.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 14:37:16 GMT
Server: Apache
Last-Modified: Wed, 24 Feb 2021 16:51:26 GMT
Accept-Ranges: bytes
Content-Length: 1450
Keep-Alive: timeout=5, max=82
Connection: Keep-Alive
Content-Type: image/png
ministeriodapalavra.com/content/dam/vetrina/design/loghi/trasparenza.png
162.241.55.185404 Not Found 315 B URL HTTP/1.1 ministeriodapalavra.com/content/dam/vetrina/design/loghi/trasparenza.png
IP 162.241.55.185:0
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
Analyzer Verdict Alert openphish Intesa Sanpaolo
GET /content/dam/vetrina/design/loghi/trasparenza.png HTTP/1.1
Host: ministeriodapalavra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ministeriodapalavra.com/
Cookie: utag_main=v_id:0184dd91e375008399069d4897e000050002000900918$_sn:1$_ss:0$_pn:2%3Bexp-session$_st:1670166437172$ses_id:1670164636533%3Bexp-session$vapi_domain:ministeriodapalavra.com; AMCV_761F7500590204020A495ED3%40AdobeOrg=1585540135%7CMCIDTS%7C19331%7CvVersion%7C4.4.0; _omappvp=sDpL8GQOCr2b7x9hq29vETwWgwBt25jzFU9c2dd6GKl9LegoHYChiOV0Dfj7Zc49KzQUdbRphz4j0Qgh0355uUVtlJ01U3Ww; _omappvs=1670164637484; _ga=GA1.2.948656355.1670164638; _gid=GA1.2.1067199240.1670164638; _gat=1; actualSection=persona-e-famiglia
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 404 Not Found
Date: Sun, 04 Dec 2022 14:37:16 GMT
Server: Apache
Content-Length: 315
Keep-Alive: timeout=5, max=85
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
ministeriodapalavra.com/content/dam/vetrina/design/loghi/logo_compara_conti.png
162.241.55.185404 Not Found 315 B URL HTTP/1.1 ministeriodapalavra.com/content/dam/vetrina/design/loghi/logo_compara_conti.png
IP 162.241.55.185:0
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
Analyzer Verdict Alert openphish Intesa Sanpaolo
GET /content/dam/vetrina/design/loghi/logo_compara_conti.png HTTP/1.1
Host: ministeriodapalavra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ministeriodapalavra.com/
Cookie: utag_main=v_id:0184dd91e375008399069d4897e000050002000900918$_sn:1$_ss:0$_pn:2%3Bexp-session$_st:1670166437172$ses_id:1670164636533%3Bexp-session$vapi_domain:ministeriodapalavra.com; AMCV_761F7500590204020A495ED3%40AdobeOrg=1585540135%7CMCIDTS%7C19331%7CvVersion%7C4.4.0; _omappvp=sDpL8GQOCr2b7x9hq29vETwWgwBt25jzFU9c2dd6GKl9LegoHYChiOV0Dfj7Zc49KzQUdbRphz4j0Qgh0355uUVtlJ01U3Ww; _omappvs=1670164637484; _ga=GA1.2.948656355.1670164638; _gid=GA1.2.1067199240.1670164638; _gat=1; actualSection=persona-e-famiglia
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 404 Not Found
Date: Sun, 04 Dec 2022 14:37:16 GMT
Server: Apache
Content-Length: 315
Keep-Alive: timeout=5, max=76
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
ministeriodapalavra.com/content/dam/vetrina/design/loghi/logo-footer.png
162.241.55.185404 Not Found 315 B URL HTTP/1.1 ministeriodapalavra.com/content/dam/vetrina/design/loghi/logo-footer.png
IP 162.241.55.185:0
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
Analyzer Verdict Alert openphish Intesa Sanpaolo
GET /content/dam/vetrina/design/loghi/logo-footer.png HTTP/1.1
Host: ministeriodapalavra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ministeriodapalavra.com/
Cookie: utag_main=v_id:0184dd91e375008399069d4897e000050002000900918$_sn:1$_ss:0$_pn:2%3Bexp-session$_st:1670166437172$ses_id:1670164636533%3Bexp-session$vapi_domain:ministeriodapalavra.com; AMCV_761F7500590204020A495ED3%40AdobeOrg=1585540135%7CMCIDTS%7C19331%7CvVersion%7C4.4.0; _omappvp=sDpL8GQOCr2b7x9hq29vETwWgwBt25jzFU9c2dd6GKl9LegoHYChiOV0Dfj7Zc49KzQUdbRphz4j0Qgh0355uUVtlJ01U3Ww; _omappvs=1670164637484; _ga=GA1.2.948656355.1670164638; _gid=GA1.2.1067199240.1670164638; _gat=1; actualSection=persona-e-famiglia
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 404 Not Found
Date: Sun, 04 Dec 2022 14:37:16 GMT
Server: Apache
Content-Length: 315
Keep-Alive: timeout=5, max=79
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
ministeriodapalavra.com/ib/public/guestarea/assets/freccinaBiancaGiu.png
162.241.55.185404 Not Found 315 B URL HTTP/1.1 ministeriodapalavra.com/ib/public/guestarea/assets/freccinaBiancaGiu.png
IP 162.241.55.185:0
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
Analyzer Verdict Alert openphish Intesa Sanpaolo
GET /ib/public/guestarea/assets/freccinaBiancaGiu.png HTTP/1.1
Host: ministeriodapalavra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ministeriodapalavra.com/
Cookie: utag_main=v_id:0184dd91e375008399069d4897e000050002000900918$_sn:1$_ss:0$_pn:2%3Bexp-session$_st:1670166437172$ses_id:1670164636533%3Bexp-session$vapi_domain:ministeriodapalavra.com; AMCV_761F7500590204020A495ED3%40AdobeOrg=1585540135%7CMCIDTS%7C19331%7CvVersion%7C4.4.0; _omappvp=sDpL8GQOCr2b7x9hq29vETwWgwBt25jzFU9c2dd6GKl9LegoHYChiOV0Dfj7Zc49KzQUdbRphz4j0Qgh0355uUVtlJ01U3Ww; _omappvs=1670164637484; _ga=GA1.2.948656355.1670164638; _gid=GA1.2.1067199240.1670164638; _gat=1; actualSection=persona-e-famiglia; WTLOPTOUT=session; IntesaSanpaolo_NoCookie=session
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 404 Not Found
Date: Sun, 04 Dec 2022 14:37:16 GMT
Server: Apache
Content-Length: 315
Keep-Alive: timeout=5, max=81
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
ministeriodapalavra.com/ib/public/guestarea/assets/freccinaBianca.png
162.241.55.185404 Not Found 315 B URL HTTP/1.1 ministeriodapalavra.com/ib/public/guestarea/assets/freccinaBianca.png
IP 162.241.55.185:0
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
Analyzer Verdict Alert openphish Intesa Sanpaolo
GET /ib/public/guestarea/assets/freccinaBianca.png HTTP/1.1
Host: ministeriodapalavra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ministeriodapalavra.com/
Cookie: utag_main=v_id:0184dd91e375008399069d4897e000050002000900918$_sn:1$_ss:0$_pn:2%3Bexp-session$_st:1670166437172$ses_id:1670164636533%3Bexp-session$vapi_domain:ministeriodapalavra.com; AMCV_761F7500590204020A495ED3%40AdobeOrg=1585540135%7CMCIDTS%7C19331%7CvVersion%7C4.4.0; _omappvp=sDpL8GQOCr2b7x9hq29vETwWgwBt25jzFU9c2dd6GKl9LegoHYChiOV0Dfj7Zc49KzQUdbRphz4j0Qgh0355uUVtlJ01U3Ww; _omappvs=1670164637484; _ga=GA1.2.948656355.1670164638; _gid=GA1.2.1067199240.1670164638; _gat=1; actualSection=persona-e-famiglia; WTLOPTOUT=session; IntesaSanpaolo_NoCookie=session
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 404 Not Found
Date: Sun, 04 Dec 2022 14:37:16 GMT
Server: Apache
Content-Length: 315
Keep-Alive: timeout=5, max=81
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash fd0b48347644ddc60fb16b04140cfcb7
ef8d6c8e3c979e98c82655290150aa14fe5d44d1
f3d27c16653ed979a7cce2dc6239a48a86c7dab2fc34949b540802e50b05275a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4992
Cache-Control: max-age=106882
Content-Type: application/ocsp-response
Date: Sun, 04 Dec 2022 14:37:21 GMT
Etag: "638b9ba3-1d7"
Expires: Mon, 05 Dec 2022 20:18:43 GMT
Last-Modified: Sat, 03 Dec 2022 18:55:31 GMT
Server: ECS (ska/F710)
X-Cache: HIT
Content-Length: 471
connect.facebook.net/it_IT/sdk.js?hash=5da9ed94a30d32ec1db357dfd10ec19d
157.240.240.1200 OK 88 kB URL HTTP/2 connect.facebook.net/it_IT/sdk.js?hash=5da9ed94a30d32ec1db357dfd10ec19d
IP 157.240.240.1:0
File type ASCII text, with very long lines (18530)
Hash 50b233ac08b0b4963c7a6471601e3b1f
07b4d20876e1b107477c8cf85c34a249b40fbbf0
b1c959e5d142622f971751e19cd6a3a924e13e772db9b9614de4c0b6722d2db4
GET /it_IT/sdk.js?hash=5da9ed94a30d32ec1db357dfd10ec19d HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://ministeriodapalavra.com
Connection: keep-alive
Referer: https://ministeriodapalavra.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
access-control-expose-headers: X-FB-Content-MD5
x-fb-content-md5: a874da46a31a99ad67597c4575607228
etag: "c87de5233d6e72b169b7086d02d8d4d9"
content-type: application/x-javascript; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
expires: Mon, 04 Dec 2023 14:37:21 GMT
cache-control: public,max-age=31536000,stale-while-revalidate=3600,immutable
document-policy: force-load-at-top
cross-origin-opener-policy: same-origin-allow-popups
x-content-type-options: nosniff
x-fb-rlafr: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
content-md5: ULIzrAiwtJY8emRxYB47Hw==
x-fb-debug: vfETqYPs34m5BRVtQWciM3uXdhIx1ktm1DRn1mGMh7ns1+JPqgbOu93i0NWL4ADg/rQn0Fs+dqga6VEI79cr5g==
content-length: 88387
priority: u=3,i
x-fb-trip-id: 1679558926
date: Sun, 04 Dec 2022 14:37:21 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ministeriodapalavra.com/ib/public/guestarea/assets/menugiu.png
162.241.55.185404 Not Found 315 B URL HTTP/1.1 ministeriodapalavra.com/ib/public/guestarea/assets/menugiu.png
IP 162.241.55.185:0
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
Analyzer Verdict Alert openphish Intesa Sanpaolo
GET /ib/public/guestarea/assets/menugiu.png HTTP/1.1
Host: ministeriodapalavra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ministeriodapalavra.com/
Cookie: utag_main=v_id:0184dd91e375008399069d4897e000050002000900918$_sn:1$_ss:0$_pn:2%3Bexp-session$_st:1670166437172$ses_id:1670164636533%3Bexp-session$vapi_domain:ministeriodapalavra.com; AMCV_761F7500590204020A495ED3%40AdobeOrg=1585540135%7CMCIDTS%7C19331%7CvVersion%7C4.4.0; _omappvp=sDpL8GQOCr2b7x9hq29vETwWgwBt25jzFU9c2dd6GKl9LegoHYChiOV0Dfj7Zc49KzQUdbRphz4j0Qgh0355uUVtlJ01U3Ww; _omappvs=1670164637484; _ga=GA1.2.948656355.1670164638; _gid=GA1.2.1067199240.1670164638; _gat=1; actualSection=persona-e-famiglia; WTLOPTOUT=session; IntesaSanpaolo_NoCookie=session
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 404 Not Found
Date: Sun, 04 Dec 2022 14:37:16 GMT
Server: Apache
Content-Length: 315
Keep-Alive: timeout=5, max=81
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
ministeriodapalavra.com/content/dam/vetrina/mock/banks-list.json
162.241.55.185404 Not Found 315 B URL HTTP/1.1 ministeriodapalavra.com/content/dam/vetrina/mock/banks-list.json
IP 162.241.55.185:0
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
Analyzer Verdict Alert openphish Intesa Sanpaolo
fortinet Phishing
GET /content/dam/vetrina/mock/banks-list.json HTTP/1.1
Host: ministeriodapalavra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ministeriodapalavra.com/
Cookie: utag_main=v_id:0184dd91e375008399069d4897e000050002000900918$_sn:1$_ss:0$_pn:2%3Bexp-session$_st:1670166437172$ses_id:1670164636533%3Bexp-session$vapi_domain:ministeriodapalavra.com; AMCV_761F7500590204020A495ED3%40AdobeOrg=1585540135%7CMCIDTS%7C19331%7CMCMID%7C62929708510729805045293041592367326059%7CMCOPTOUT-1670171838s%7CNONE%7CvVersion%7C4.4.0; _omappvp=sDpL8GQOCr2b7x9hq29vETwWgwBt25jzFU9c2dd6GKl9LegoHYChiOV0Dfj7Zc49KzQUdbRphz4j0Qgh0355uUVtlJ01U3Ww; _omappvs=1670164637484; _ga=GA1.2.948656355.1670164638; _gid=GA1.2.1067199240.1670164638; _gat=1; actualSection=persona-e-famiglia; WTLOPTOUT=session; IntesaSanpaolo_NoCookie=session; AMCVS_761F7500590204020A495ED3%40AdobeOrg=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 404 Not Found
Date: Sun, 04 Dec 2022 14:37:16 GMT
Server: Apache
Content-Length: 315
Keep-Alive: timeout=5, max=84
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
ministeriodapalavra.com/ib/public/guestarea/assets/menusu.png
162.241.55.185404 Not Found 315 B URL HTTP/1.1 ministeriodapalavra.com/ib/public/guestarea/assets/menusu.png
IP 162.241.55.185:0
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
Analyzer Verdict Alert openphish Intesa Sanpaolo
GET /ib/public/guestarea/assets/menusu.png HTTP/1.1
Host: ministeriodapalavra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ministeriodapalavra.com/
Cookie: utag_main=v_id:0184dd91e375008399069d4897e000050002000900918$_sn:1$_ss:0$_pn:2%3Bexp-session$_st:1670166437172$ses_id:1670164636533%3Bexp-session$vapi_domain:ministeriodapalavra.com; AMCV_761F7500590204020A495ED3%40AdobeOrg=1585540135%7CMCIDTS%7C19331%7CvVersion%7C4.4.0; _omappvp=sDpL8GQOCr2b7x9hq29vETwWgwBt25jzFU9c2dd6GKl9LegoHYChiOV0Dfj7Zc49KzQUdbRphz4j0Qgh0355uUVtlJ01U3Ww; _omappvs=1670164637484; _ga=GA1.2.948656355.1670164638; _gid=GA1.2.1067199240.1670164638; _gat=1; actualSection=persona-e-famiglia; WTLOPTOUT=session; IntesaSanpaolo_NoCookie=session
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 404 Not Found
Date: Sun, 04 Dec 2022 14:37:16 GMT
Server: Apache
Content-Length: 315
Keep-Alive: timeout=5, max=75
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
ministeriodapalavra.com/ib/public/guestarea/assets/infinito.png
162.241.55.185404 Not Found 315 B URL HTTP/1.1 ministeriodapalavra.com/ib/public/guestarea/assets/infinito.png
IP 162.241.55.185:0
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
Analyzer Verdict Alert openphish Intesa Sanpaolo
GET /ib/public/guestarea/assets/infinito.png HTTP/1.1
Host: ministeriodapalavra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ministeriodapalavra.com/
Cookie: utag_main=v_id:0184dd91e375008399069d4897e000050002000900918$_sn:1$_ss:0$_pn:2%3Bexp-session$_st:1670166437172$ses_id:1670164636533%3Bexp-session$vapi_domain:ministeriodapalavra.com; AMCV_761F7500590204020A495ED3%40AdobeOrg=1585540135%7CMCIDTS%7C19331%7CvVersion%7C4.4.0; _omappvp=sDpL8GQOCr2b7x9hq29vETwWgwBt25jzFU9c2dd6GKl9LegoHYChiOV0Dfj7Zc49KzQUdbRphz4j0Qgh0355uUVtlJ01U3Ww; _omappvs=1670164637484; _ga=GA1.2.948656355.1670164638; _gid=GA1.2.1067199240.1670164638; _gat=1; actualSection=persona-e-famiglia; WTLOPTOUT=session; IntesaSanpaolo_NoCookie=session
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 404 Not Found
Date: Sun, 04 Dec 2022 14:37:16 GMT
Server: Apache
Content-Length: 315
Keep-Alive: timeout=5, max=78
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
ministeriodapalavra.com/ib/public/guestarea/assets/sliderSx.png
162.241.55.185404 Not Found 315 B URL HTTP/1.1 ministeriodapalavra.com/ib/public/guestarea/assets/sliderSx.png
IP 162.241.55.185:0
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
Analyzer Verdict Alert openphish Intesa Sanpaolo
GET /ib/public/guestarea/assets/sliderSx.png HTTP/1.1
Host: ministeriodapalavra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ministeriodapalavra.com/
Cookie: utag_main=v_id:0184dd91e375008399069d4897e000050002000900918$_sn:1$_ss:0$_pn:2%3Bexp-session$_st:1670166437172$ses_id:1670164636533%3Bexp-session$vapi_domain:ministeriodapalavra.com; AMCV_761F7500590204020A495ED3%40AdobeOrg=1585540135%7CMCIDTS%7C19331%7CvVersion%7C4.4.0; _omappvp=sDpL8GQOCr2b7x9hq29vETwWgwBt25jzFU9c2dd6GKl9LegoHYChiOV0Dfj7Zc49KzQUdbRphz4j0Qgh0355uUVtlJ01U3Ww; _omappvs=1670164637484; _ga=GA1.2.948656355.1670164638; _gid=GA1.2.1067199240.1670164638; _gat=1; actualSection=persona-e-famiglia; WTLOPTOUT=session; IntesaSanpaolo_NoCookie=session
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 404 Not Found
Date: Sun, 04 Dec 2022 14:37:16 GMT
Server: Apache
Content-Length: 315
Keep-Alive: timeout=5, max=80
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
ministeriodapalavra.com/ib/public/guestarea/assets/sliderDx.png
162.241.55.185404 Not Found 315 B URL HTTP/1.1 ministeriodapalavra.com/ib/public/guestarea/assets/sliderDx.png
IP 162.241.55.185:0
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
Analyzer Verdict Alert openphish Intesa Sanpaolo
GET /ib/public/guestarea/assets/sliderDx.png HTTP/1.1
Host: ministeriodapalavra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ministeriodapalavra.com/
Cookie: utag_main=v_id:0184dd91e375008399069d4897e000050002000900918$_sn:1$_ss:0$_pn:2%3Bexp-session$_st:1670166437172$ses_id:1670164636533%3Bexp-session$vapi_domain:ministeriodapalavra.com; AMCV_761F7500590204020A495ED3%40AdobeOrg=1585540135%7CMCIDTS%7C19331%7CvVersion%7C4.4.0; _omappvp=sDpL8GQOCr2b7x9hq29vETwWgwBt25jzFU9c2dd6GKl9LegoHYChiOV0Dfj7Zc49KzQUdbRphz4j0Qgh0355uUVtlJ01U3Ww; _omappvs=1670164637484; _ga=GA1.2.948656355.1670164638; _gid=GA1.2.1067199240.1670164638; _gat=1; actualSection=persona-e-famiglia; WTLOPTOUT=session; IntesaSanpaolo_NoCookie=session
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 404 Not Found
Date: Sun, 04 Dec 2022 14:37:16 GMT
Server: Apache
Content-Length: 315
Keep-Alive: timeout=5, max=80
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
ministeriodapalavra.com/ib/public/guestarea/assets/freccia_dropdown.png
162.241.55.185404 Not Found 315 B URL HTTP/1.1 ministeriodapalavra.com/ib/public/guestarea/assets/freccia_dropdown.png
IP 162.241.55.185:0
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash a34ac19f4afae63adc5d2f7bc970c07f
a82190fc530c265aa40a045c21770d967f4767b8
d5a89e26beae0bc03ad18a0b0d1d3d75f87c32047879d25da11970cb5c4662a3
Analyzer Verdict Alert openphish Intesa Sanpaolo
GET /ib/public/guestarea/assets/freccia_dropdown.png HTTP/1.1
Host: ministeriodapalavra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ministeriodapalavra.com/
Cookie: utag_main=v_id:0184dd91e375008399069d4897e000050002000900918$_sn:1$_ss:0$_pn:2%3Bexp-session$_st:1670166437172$ses_id:1670164636533%3Bexp-session$vapi_domain:ministeriodapalavra.com; AMCV_761F7500590204020A495ED3%40AdobeOrg=1585540135%7CMCIDTS%7C19331%7CvVersion%7C4.4.0; _omappvp=sDpL8GQOCr2b7x9hq29vETwWgwBt25jzFU9c2dd6GKl9LegoHYChiOV0Dfj7Zc49KzQUdbRphz4j0Qgh0355uUVtlJ01U3Ww; _omappvs=1670164637484; _ga=GA1.2.948656355.1670164638; _gid=GA1.2.1067199240.1670164638; _gat=1; actualSection=persona-e-famiglia; WTLOPTOUT=session; IntesaSanpaolo_NoCookie=session
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 404 Not Found
Date: Sun, 04 Dec 2022 14:37:16 GMT
Server: Apache
Content-Length: 315
Keep-Alive: timeout=5, max=80
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
intesasanpaolo.d3.sc.omtrdc.net/id?d_visid_ver=4.4.0&d_fieldgroup=A&mcorgid=761F7500590204020A495ED3%40AdobeOrg&mid=41932937202663213673597386562172065675&ts=1670164639074
15.188.95.229200 OK 2 B URL HTTP/2 intesasanpaolo.d3.sc.omtrdc.net/id?d_visid_ver=4.4.0&d_fieldgroup=A&mcorgid=761F7500590204020A495ED3%40AdobeOrg&mid=41932937202663213673597386562172065675&ts=1670164639074
IP 15.188.95.229:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 99914b932bd37a50b983c5e7c90ae93b
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
GET /id?d_visid_ver=4.4.0&d_fieldgroup=A&mcorgid=761F7500590204020A495ED3%40AdobeOrg&mid=41932937202663213673597386562172065675&ts=1670164639074 HTTP/1.1
Host: intesasanpaolo.d3.sc.omtrdc.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Origin: https://ministeriodapalavra.com
Connection: keep-alive
Referer: https://ministeriodapalavra.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://ministeriodapalavra.com
access-control-allow-credentials: true
date: Sun, 04 Dec 2022 14:37:21 GMT
p3p: CP="This is not a P3P policy"
server: jag
vary: Origin
content-type: application/x-javascript;charset=utf-8
content-length: 2
cache-control: no-cache, no-store, max-age=0, no-transform, private
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
dpm.demdex.net/id?d_visid_ver=4.4.0&d_fieldgroup=AAM&d_rtbd=json&d_ver=2&d_orgid=761F7500590204020A495ED3%40AdobeOrg&d_nsid=0&d_mid=62929708510729805045293041592367326059&ts=1670164639076
52.211.247.227200 OK 212 B URL HTTP/1.1 dpm.demdex.net/id?d_visid_ver=4.4.0&d_fieldgroup=AAM&d_rtbd=json&d_ver=2&d_orgid=761F7500590204020A495ED3%40AdobeOrg&d_nsid=0&d_mid=62929708510729805045293041592367326059&ts=1670164639076
IP 52.211.247.227:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 891e0c227c43a03765372b98333eac0e
13c18efc4a29b6029ba5f571752e3566dd9bb3a1
58127675bf430a37c12a10acb0cb019b50476f277a4d0640ee5ac010c8a07d34
GET /id?d_visid_ver=4.4.0&d_fieldgroup=AAM&d_rtbd=json&d_ver=2&d_orgid=761F7500590204020A495ED3%40AdobeOrg&d_nsid=0&d_mid=62929708510729805045293041592367326059&ts=1670164639076 HTTP/1.1
Host: dpm.demdex.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Origin: https://ministeriodapalavra.com
Connection: keep-alive
Referer: https://ministeriodapalavra.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://ministeriodapalavra.com
Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private
content-encoding: gzip
Content-Type: application/json;charset=utf-8
DCS: dcs-prod-irl1-2-v045-0f9127447.edge-irl1.demdex.com 3 ms
Expires: Thu, 01 Jan 1970 00:00:00 UTC
P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT"
Pragma: no-cache
set-cookie: demdex=63099044934767593095310023621193323134; Max-Age=15552000; Expires=Fri, 02 Jun 2023 14:37:21 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
Strict-Transport-Security: max-age=31536000; includeSubDomains
Vary: Origin
X-TID: tFdKHiz4RBw=
Content-Length: 212
Connection: keep-alive
ocsp2.globalsign.com/rootr3
151.101.2.133200 OK 1.4 kB URL HTTP/1.1 ocsp2.globalsign.com/rootr3
IP 151.101.2.133:0
Hash 126b52bca4751155271c6cf1553a6dac
4e9e0c548368ffdbc24bb20091ff5fa484159563
6230ca5053d49621804ce47001038b62f0e1e2459bd2169f1c8fcd93725ea2cb
POST /rootr3 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 81
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 1434
Server: nginx
Content-Type: application/ocsp-response
Expires: Thu, 08 Dec 2022 11:59:34 GMT
ETag: "4e9e0c548368ffdbc24bb20091ff5fa484159563"
Last-Modified: Sun, 04 Dec 2022 11:59:35 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Sun, 04 Dec 2022 14:37:21 GMT
Age: 317
X-Served-By: cache-qpg1250-QPG, cache-bma1621-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 3, 1
X-Timer: S1670164642.748631,VS0,VE1
ocsp2.globalsign.com/gsextendvalsha2g3r3
151.101.2.133200 OK 1.4 kB URL HTTP/1.1 ocsp2.globalsign.com/gsextendvalsha2g3r3
IP 151.101.2.133:0
Hash eaa48f6d412cfa4440842a353c1d1e37
847b0ae38eb388561a876320e11439fdd0900cab
9a5455f25689d56896d930a49d330b37ef7bfc83e2f01767e02591efcdd41f51
POST /gsextendvalsha2g3r3 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 1444
Server: nginx
Content-Type: application/ocsp-response
Expires: Thu, 08 Dec 2022 14:10:31 GMT
ETag: "847b0ae38eb388561a876320e11439fdd0900cab"
Last-Modified: Sun, 04 Dec 2022 14:10:32 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Sun, 04 Dec 2022 14:37:22 GMT
Age: 1610
X-Served-By: cache-qpg1276-QPG, cache-bma1621-BMA
X-Cache: HIT, MISS
X-Cache-Hits: 3, 0
X-Timer: S1670164642.773625,VS0,VE429
www.intesasanpaolo.com/etc/designs/vetrina/favicon.ico
193.203.234.216200 OK 894 B URL HTTP/1.1 www.intesasanpaolo.com/etc/designs/vetrina/favicon.ico
IP 193.203.234.216:0
ASN #20942 Intesa Sanpaolo S.p.A.
File type MS Windows icon resource - 1 icon, 16x16, 24 bits/pixel\012- data
Hash 181d29d10f73ff75eef9bea8adf9f70e
d63deb748f35a8a04d095e42c568b4a4c7857efb
3068a8912d867110dd2fa99fe1df6ba6f81e05fb9bc2f54c29e78bbb3d3c89d7
GET /etc/designs/vetrina/favicon.ico HTTP/1.1
Host: www.intesasanpaolo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ministeriodapalavra.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 14:37:22 GMT
Access-Control-Max-Age: 86400
Access-Control-Allow-Headers: accept,accept-encoding,accessmode,applicationname,authorization,bank-code,bt,caller,channel,clientversion,content-type,lang,operationsystem,origin,profilo-reset,useragent,x-isp-keyid,x-isp-signature,x-requested-with,formname,X-File-Size,cEgida,accept-language,connection,content-length,host,referer,accept-ranges,range,user-agent,devicemodel,geolocation,x-request-id,my-host,digest,signature,devicedna,f&f,deviceIDrba,deviceSignature,tipoCliente,x-bear-session-token,x-isp-session-id,x-isp-transaction-id,x-isp-execution,x-isp-cypher,x-isp-browsername,,x-ma-bid,x-ma-sid,x-ma-hostname,x-ma-pid,uniqueid,Page
Access-Control-Expose-Headers: accept-ranges,content-encoding,content-length,content-range,deviceIDrba
Access-Control-Allow-Methods: POST, GET, OPTIONS, DELETE, PUT, PATCH
Access-Control-Allow-Credentials: true
ETag: "37e"
Accept-Ranges: bytes
Content-Length: 894
X-Frame-Options: SAMEORIGIN
Vary: User-Agent
Cache-Control: no-cache
Keep-Alive: timeout=2, max=100
Connection: Keep-Alive
Content-Type: image/vnd.microsoft.icon
Strict-Transport-Security: max-age=16070400; includeSubDomains
Set-Cookie: TS0108408c=011353757b430c878f10cf38fb4b12bf5aa08137e2c884d2cc27cb0d0f3d473dd83b3135be3afa3c1861b2b7f987bf8fc51def87b4; Path=/; Secure; HTTPOnly
ministeriodapalavra.com/isp_files/clientlib-site.js
162.241.55.185200 OK 0 B URL HTTP/1.1 ministeriodapalavra.com/isp_files/clientlib-site.js
IP 162.241.55.185:0
ASN #46606 UNIFIEDLAYER-AS-1
Analyzer Verdict Alert openphish Intesa Sanpaolo
fortinet Phishing
GET /isp_files/clientlib-site.js HTTP/1.1
Host: ministeriodapalavra.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ministeriodapalavra.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sun, 04 Dec 2022 14:37:14 GMT
Server: Apache
Last-Modified: Wed, 24 Feb 2021 16:51:10 GMT
Accept-Ranges: bytes
Content-Length: 227195
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: application/javascript
a.omappapi.com/app/js/api.min.css
194.242.11.186200 OK 0 B URL HTTP/2 a.omappapi.com/app/js/api.min.css
IP 194.242.11.186:0
ASN #34989 ServeTheWorld AS
GET /app/js/api.min.css HTTP/1.1
Host: a.omappapi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ministeriodapalavra.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 04 Dec 2022 14:37:19 GMT
content-type: text/css
server: BunnyCDN-NO1-830
cdn-pullzone: 293267
cdn-uid: efcab737-66db-4b75-ab55-ed485d5a01dd
cdn-requestcountrycode: NO
vary: Accept-Encoding, Accept-Encoding
access-control-allow-origin: *
access-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
access-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match
cache-control: public, max-age=31919000
etag: W/"6378026e-464c"
last-modified: Fri, 18 Nov 2022 22:08:46 GMT
cdn-storageserver: DE-165
cdn-requestpullsuccess: True
cdn-fileserver: 296
perma-cache: HIT
cdn-proxyver: 1.03
cdn-requestpullcode: 200
cdn-cachedat: 12/03/2022 14:13:30
cdn-edgestorageid: 830
cdn-status: 200
cdn-requestid: 3f91ffe3ebb45086c1f6a55613a7571f
cdn-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
cdn.000webhost.com/000webhost/000webhost-pages/corgi-lies-on-ground.svg
104.19.185.120200 OK 0 B URL HTTP/2 cdn.000webhost.com/000webhost/000webhost-pages/corgi-lies-on-ground.svg
IP 104.19.185.120:0
GET /000webhost/000webhost-pages/corgi-lies-on-ground.svg HTTP/1.1
Host: cdn.000webhost.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ministeriodapalavra.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 04 Dec 2022 14:37:19 GMT
content-type: image/svg+xml
last-modified: Thu, 24 Nov 2022 08:04:16 GMT
etag: W/"637f2580-18e5"
x-hostinger-datacenter: srv
x-hostinger-node: nl-srv-cdn2
x-frame-options: sameorigin
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
strict-transport-security: max-age=2592000
cf-cache-status: REVALIDATED
expires: Sun, 04 Dec 2022 18:37:19 GMT
cache-control: public, max-age=14400
vary: Accept-Encoding
server: cloudflare
cf-ray: 774547861b8ab4ed-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2