| |  4.232.8.16 | 200 OK | 12 kB |
URL User Request GET HTTP/1.1IP4.232.8.16:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
CertificateIssuerGlobalSign nv-sa Subjectposteid.poste.it FingerprintF0:CF:72:CB:03:F6:23:39:79:90:92:AD:FD:A3:CB:D9:B6:83:59:B4 ValidityWed, 12 Apr 2023 10:21:48 GMT - Mon, 13 May 2024 10:21:47 GMT
File typeHTML document, ASCII text, with very long lines (748), with CRLF, LF line terminators Hashed84ca3c41ead00aa6414004dc0d4766 15f5284e491bc12216e0a8ea86a252fa13403e8b aeb0991c1092a99aeb2055a40490103c279ee56068f72dd18f0208ad3836b8bc
GET / HTTP/1.1
Host: posteid.poste.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 08:22:47 GMT
Content-Type: text/html;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Vary: X-Forwarded-For
P3P: CP="CAO PSA OUR DEM"
X-Frame-Options: SAMEORIGIN
Set-Cookie: JSESSIONID=PLcCMGom4L+rxhlYc13H34E-.portal5; Path=/;HttpOnly;Secure
id-P-N=RM;Path=/;Max-Age=3600
Content-Encoding: gzip
|
|
| assets.adobedtm.com/launch-EN592261e36dc14b10a9936e854a4b30db.min.js |  23.38.200.237 | 200 OK | 101 kB |
URL GET HTTP/2assets.adobedtm.com/launch-EN592261e36dc14b10a9936e854a4b30db.min.js IP23.38.200.237:443
Requested byhttps://posteid.poste.it/ CertificateIssuerDigiCert Inc Subjectassets.adobedtm.com Fingerprint8E:2F:9F:94:55:93:C2:B5:58:37:E8:D3:02:3C:23:AF:BA:E7:1D:EA ValidityTue, 11 Jul 2023 00:00:00 GMT - Sat, 10 Aug 2024 23:59:59 GMT
File typeASCII text, with very long lines (32757) Size101 kB (100861 bytes) Hash9946baa7dd3bd812d099de13dcbc5705 d010455487d6506eb4d9be7a9b5d8b1636d9a096 f69e11c29e6696122aaca74e24956a3506bd293129d868bfa7bdb040ce4646d9
GET /launch-EN592261e36dc14b10a9936e854a4b30db.min.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://posteid.poste.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "9946baa7dd3bd812d099de13dcbc5705:1715068658.494194"
last-modified: Tue, 07 May 2024 07:57:38 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
content-length: 100861
cache-control: max-age=3600
expires: Tue, 07 May 2024 09:22:48 GMT
date: Tue, 07 May 2024 08:22:48 GMT
access-control-allow-origin: https://posteid.poste.it
timing-allow-origin: *
X-Firefox-Spdy: h2
|
|
| posteid.poste.it/risorse_dt/bootstrap/css/bootstrap.min.css | 4.232.8.16 | 200 OK | 26 kB |
URL GET HTTP/1.1posteid.poste.it/risorse_dt/bootstrap/css/bootstrap.min.css IP4.232.8.16:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://posteid.poste.it/ CertificateIssuerGlobalSign nv-sa Subjectposteid.poste.it FingerprintF0:CF:72:CB:03:F6:23:39:79:90:92:AD:FD:A3:CB:D9:B6:83:59:B4 ValidityWed, 12 Apr 2023 10:21:48 GMT - Mon, 13 May 2024 10:21:47 GMT
File typeASCII text, with very long lines (64985) Hash6181a38a601eb664522623bae7db95c9 9671b5fc92e27a915769b59bc60bf26fde343d7e 8b922a249c9f81562d99eee24407bf38c7feac74a10dfe712292c0b032144dfa
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Poste Italiane |
GET /risorse_dt/bootstrap/css/bootstrap.min.css HTTP/1.1
Host: posteid.poste.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://posteid.poste.it/
Cookie: JSESSIONID=PLcCMGom4L+rxhlYc13H34E-.portal5; id-P-N=RM
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 08:22:48 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Last-Modified: Wed, 17 Apr 2024 16:19:10 GMT
ETag: W/"661ff67e-1ddb3"
Expires: Tue, 07 May 2024 09:22:48 GMT
X-Src: NginxRM
Pragma: public
Cache-Control: max-age=3600, public
Content-Encoding: gzip
|
|
| posteid.poste.it/risorse_dt/condivise/stili/trasversali/slick-theme.css | 4.232.8.16 | 200 OK | 1.1 kB |
URL GET HTTP/1.1posteid.poste.it/risorse_dt/condivise/stili/trasversali/slick-theme.css IP4.232.8.16:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://posteid.poste.it/ CertificateIssuerGlobalSign nv-sa Subjectposteid.poste.it FingerprintF0:CF:72:CB:03:F6:23:39:79:90:92:AD:FD:A3:CB:D9:B6:83:59:B4 ValidityWed, 12 Apr 2023 10:21:48 GMT - Mon, 13 May 2024 10:21:47 GMT
Hash14c9d122ba3eb0a4a6beba74a462ff1b 99bcd014cc3c5649657b3669244039ee3dbf1311 ddb311355c47c29688cab28a8c3df71f46d86d9b6baf2141e0e9db011076352d
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Poste Italiane |
GET /risorse_dt/condivise/stili/trasversali/slick-theme.css HTTP/1.1
Host: posteid.poste.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://posteid.poste.it/
Cookie: JSESSIONID=PLcCMGom4L+rxhlYc13H34E-.portal5; id-P-N=RM
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 08:22:48 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Last-Modified: Wed, 17 Apr 2024 16:19:00 GMT
ETag: W/"661ff674-d76"
Expires: Tue, 07 May 2024 09:22:48 GMT
X-Src: NginxRM
Pragma: public
Cache-Control: max-age=3600, public
Content-Encoding: gzip
|
|
| posteid.poste.it/risorse_dt/condivise/stili/trasversali/owl.carousel.css | 4.232.8.16 | 200 OK | 1.3 kB |
URL GET HTTP/1.1posteid.poste.it/risorse_dt/condivise/stili/trasversali/owl.carousel.css IP4.232.8.16:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://posteid.poste.it/ CertificateIssuerGlobalSign nv-sa Subjectposteid.poste.it FingerprintF0:CF:72:CB:03:F6:23:39:79:90:92:AD:FD:A3:CB:D9:B6:83:59:B4 ValidityWed, 12 Apr 2023 10:21:48 GMT - Mon, 13 May 2024 10:21:47 GMT
Hashb51416af9e8adbe3d16f5f2526aba221 097c8d67412f44534449ed4cadc6dd22b025801d dd7b97c7ad9d7b3eb79bdc728bcbc6a7ab8e3d5db0421fb0dd16d34f3dc88277
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Poste Italiane |
GET /risorse_dt/condivise/stili/trasversali/owl.carousel.css HTTP/1.1
Host: posteid.poste.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://posteid.poste.it/
Cookie: JSESSIONID=PLcCMGom4L+rxhlYc13H34E-.portal5; id-P-N=RM
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 08:22:48 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Last-Modified: Wed, 17 Apr 2024 16:19:00 GMT
ETag: W/"661ff674-1206"
Expires: Tue, 07 May 2024 09:22:48 GMT
X-Src: NginxRM
Pragma: public
Cache-Control: max-age=3600, public
Content-Encoding: gzip
|
|
| posteid.poste.it/risorse_dt/condivise/stili/trasversali/slick.css | 4.232.8.16 | 200 OK | 599 B |
URL GET HTTP/1.1posteid.poste.it/risorse_dt/condivise/stili/trasversali/slick.css IP4.232.8.16:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://posteid.poste.it/ CertificateIssuerGlobalSign nv-sa Subjectposteid.poste.it FingerprintF0:CF:72:CB:03:F6:23:39:79:90:92:AD:FD:A3:CB:D9:B6:83:59:B4 ValidityWed, 12 Apr 2023 10:21:48 GMT - Mon, 13 May 2024 10:21:47 GMT
Hash13b1b6672b8cfb0d9ae7f899f1c42875 6e9d13342a11a8cfd9e42ee243eaeae01cda4e25 d917660c3d6f7aad32ebc4b0012c6d0bb84a13e201a012e334bcca4b9f4686c9
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Poste Italiane |
GET /risorse_dt/condivise/stili/trasversali/slick.css HTTP/1.1
Host: posteid.poste.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://posteid.poste.it/
Cookie: JSESSIONID=PLcCMGom4L+rxhlYc13H34E-.portal5; id-P-N=RM
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 08:22:48 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Last-Modified: Wed, 17 Apr 2024 16:19:00 GMT
ETag: W/"661ff674-6c1"
Expires: Tue, 07 May 2024 09:22:48 GMT
X-Src: NginxRM
Pragma: public
Cache-Control: max-age=3600, public
Content-Encoding: gzip
|
|
| posteid.poste.it/risorse_dt/condivise/stili/trasversali/base.css | 4.232.8.16 | 200 OK | 204 B |
URL GET HTTP/1.1posteid.poste.it/risorse_dt/condivise/stili/trasversali/base.css IP4.232.8.16:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://posteid.poste.it/ CertificateIssuerGlobalSign nv-sa Subjectposteid.poste.it FingerprintF0:CF:72:CB:03:F6:23:39:79:90:92:AD:FD:A3:CB:D9:B6:83:59:B4 ValidityWed, 12 Apr 2023 10:21:48 GMT - Mon, 13 May 2024 10:21:47 GMT
Hash646e86da575759dffc5b6de4931395fe fc8ad8786e31e9e72ea546bebf20a9cf76d56190 8f85dad0f23a39238f4c6d45a8ca053f3974f873b7a5a22d0bc9323ff5b86202
GET /risorse_dt/condivise/stili/trasversali/base.css HTTP/1.1
Host: posteid.poste.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://posteid.poste.it/
Cookie: JSESSIONID=PLcCMGom4L+rxhlYc13H34E-.portal5; id-P-N=RM
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 08:22:48 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Last-Modified: Wed, 17 Apr 2024 16:19:00 GMT
ETag: W/"661ff674-292"
Expires: Tue, 07 May 2024 09:22:48 GMT
X-Src: NginxRM
Pragma: public
Cache-Control: max-age=3600, public
Content-Encoding: gzip
|
|
| posteid.poste.it/risorse_dt/condivise/stili/trasversali/megamenu-pi.css | 4.232.8.16 | 200 OK | 4.2 kB |
URL GET HTTP/1.1posteid.poste.it/risorse_dt/condivise/stili/trasversali/megamenu-pi.css IP4.232.8.16:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://posteid.poste.it/ CertificateIssuerGlobalSign nv-sa Subjectposteid.poste.it FingerprintF0:CF:72:CB:03:F6:23:39:79:90:92:AD:FD:A3:CB:D9:B6:83:59:B4 ValidityWed, 12 Apr 2023 10:21:48 GMT - Mon, 13 May 2024 10:21:47 GMT
Hash91c294bb58a8b55db1fb8f910fd5954f 9fc6e4702fd55d427048e6041399f48b910e0249 668b50457f23aad4af2d5bb1f1525525b2bf4796bd2f549ff8f5597cea56451d
GET /risorse_dt/condivise/stili/trasversali/megamenu-pi.css HTTP/1.1
Host: posteid.poste.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://posteid.poste.it/
Cookie: JSESSIONID=PLcCMGom4L+rxhlYc13H34E-.portal5; id-P-N=RM
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 08:22:48 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Last-Modified: Wed, 17 Apr 2024 16:19:00 GMT
ETag: W/"661ff674-6646"
Expires: Tue, 07 May 2024 09:22:48 GMT
X-Src: NginxRM
Pragma: public
Cache-Control: max-age=3600, public
Content-Encoding: gzip
|
|
| posteid.poste.it/risorse_dt/applicazioni/trasversali/stili/ion.rangeSlider.css | 4.232.8.16 | 200 OK | 934 B |
URL GET HTTP/1.1posteid.poste.it/risorse_dt/applicazioni/trasversali/stili/ion.rangeSlider.css IP4.232.8.16:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://posteid.poste.it/ CertificateIssuerGlobalSign nv-sa Subjectposteid.poste.it FingerprintF0:CF:72:CB:03:F6:23:39:79:90:92:AD:FD:A3:CB:D9:B6:83:59:B4 ValidityWed, 12 Apr 2023 10:21:48 GMT - Mon, 13 May 2024 10:21:47 GMT
Hashebeaf8ee0e04d67d172ee639713fad1b 81dc58f28df7ca458306d493ae9c78c8450d48f8 e5ce02a6caedb279a23c84d2f04055f556fc03a44f3fa6f92f038288fbc70484
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Poste Italiane |
GET /risorse_dt/applicazioni/trasversali/stili/ion.rangeSlider.css HTTP/1.1
Host: posteid.poste.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://posteid.poste.it/
Cookie: JSESSIONID=PLcCMGom4L+rxhlYc13H34E-.portal5; id-P-N=RM
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 08:22:48 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Last-Modified: Wed, 17 Apr 2024 16:19:10 GMT
ETag: W/"661ff67e-d1b"
Expires: Tue, 07 May 2024 09:22:48 GMT
X-Src: NginxRM
Pragma: public
Cache-Control: max-age=3600, public
Content-Encoding: gzip
|
|
| posteid.poste.it/risorse_dt/condivise/stili/trasversali/retina.css | 4.232.8.16 | 200 OK | 74 B |
URL GET HTTP/1.1posteid.poste.it/risorse_dt/condivise/stili/trasversali/retina.css IP4.232.8.16:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://posteid.poste.it/ CertificateIssuerGlobalSign nv-sa Subjectposteid.poste.it FingerprintF0:CF:72:CB:03:F6:23:39:79:90:92:AD:FD:A3:CB:D9:B6:83:59:B4 ValidityWed, 12 Apr 2023 10:21:48 GMT - Mon, 13 May 2024 10:21:47 GMT
Hashab8dd1efc4d35cfc2bd56e4ace43a9c4 c8a6572e9648197bc2fb41d0ad4d34c917d4709c b9046229b1ec61510b1e34c28da4adf2174e08fd62b30daba49f8616cdb9e9a8
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Poste Italiane |
GET /risorse_dt/condivise/stili/trasversali/retina.css HTTP/1.1
Host: posteid.poste.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://posteid.poste.it/
Cookie: JSESSIONID=PLcCMGom4L+rxhlYc13H34E-.portal5; id-P-N=RM
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 08:22:48 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Last-Modified: Wed, 17 Apr 2024 16:19:00 GMT
ETag: W/"661ff674-36"
Expires: Tue, 07 May 2024 09:22:48 GMT
X-Src: NginxRM
Pragma: public
Cache-Control: max-age=3600, public
Content-Encoding: gzip
|
|
| posteid.poste.it/risorse_dt/applicazioni/trasversali/stili/bootstrap-datepicker.css | 4.232.8.16 | 200 OK | 1.7 kB |
URL GET HTTP/1.1posteid.poste.it/risorse_dt/applicazioni/trasversali/stili/bootstrap-datepicker.css IP4.232.8.16:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://posteid.poste.it/ CertificateIssuerGlobalSign nv-sa Subjectposteid.poste.it FingerprintF0:CF:72:CB:03:F6:23:39:79:90:92:AD:FD:A3:CB:D9:B6:83:59:B4 ValidityWed, 12 Apr 2023 10:21:48 GMT - Mon, 13 May 2024 10:21:47 GMT
Hash1b92d23524baef291a2762e0aa1c77f9 896a973433d0f4869e68efbe728484a10a107399 6ca3835d5b60efee0ff567dd579a509f27615f44b0bdb3c0901941702a0f801e
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Poste Italiane |
GET /risorse_dt/applicazioni/trasversali/stili/bootstrap-datepicker.css HTTP/1.1
Host: posteid.poste.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://posteid.poste.it/
Cookie: JSESSIONID=PLcCMGom4L+rxhlYc13H34E-.portal5; id-P-N=RM
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 08:22:48 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Last-Modified: Wed, 17 Apr 2024 16:19:10 GMT
ETag: W/"661ff67e-19b1"
Expires: Tue, 07 May 2024 09:22:48 GMT
X-Src: NginxRM
Pragma: public
Cache-Control: max-age=3600, public
Content-Encoding: gzip
|
|
| posteid.poste.it/risorse_dt/applicazioni/trasversali/stili/custom-form-element.css | 4.232.8.16 | 200 OK | 2.7 kB |
URL GET HTTP/1.1posteid.poste.it/risorse_dt/applicazioni/trasversali/stili/custom-form-element.css IP4.232.8.16:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://posteid.poste.it/ CertificateIssuerGlobalSign nv-sa Subjectposteid.poste.it FingerprintF0:CF:72:CB:03:F6:23:39:79:90:92:AD:FD:A3:CB:D9:B6:83:59:B4 ValidityWed, 12 Apr 2023 10:21:48 GMT - Mon, 13 May 2024 10:21:47 GMT
File typeASCII text, with very long lines (376) Hash8084b66cd9e664ff1460a438f01520c4 84fa84286bc22221d9edebb4b31d08f027eda5e2 3b6ab4f04f1b4a7fc95fe18decfdba00a35194f9a9a0fdbf6a601fdc0b0faf0d
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Poste Italiane |
GET /risorse_dt/applicazioni/trasversali/stili/custom-form-element.css HTTP/1.1
Host: posteid.poste.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://posteid.poste.it/
Cookie: JSESSIONID=PLcCMGom4L+rxhlYc13H34E-.portal5; id-P-N=RM
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 08:22:48 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Last-Modified: Wed, 17 Apr 2024 16:19:10 GMT
ETag: W/"661ff67e-4681"
Expires: Tue, 07 May 2024 09:22:48 GMT
X-Src: NginxRM
Pragma: public
Cache-Control: max-age=3600, public
Content-Encoding: gzip
|
|
| posteid.poste.it/risorse_dt/applicazioni/trasversali/stili/ion.rangeSlider.skinPoste.css | 4.232.8.16 | 200 OK | 749 B |
URL GET HTTP/1.1posteid.poste.it/risorse_dt/applicazioni/trasversali/stili/ion.rangeSlider.skinPoste.css IP4.232.8.16:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://posteid.poste.it/ CertificateIssuerGlobalSign nv-sa Subjectposteid.poste.it FingerprintF0:CF:72:CB:03:F6:23:39:79:90:92:AD:FD:A3:CB:D9:B6:83:59:B4 ValidityWed, 12 Apr 2023 10:21:48 GMT - Mon, 13 May 2024 10:21:47 GMT
Hash429c6186bcef8bf4420c719cb9dc2d97 a71cd29ce0db8410328cfc7696185720e8d8943e 037af37cf0e800755f5f0bc42d94a4c0662978d087fecbb29f9448b6ce472b70
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Poste Italiane |
GET /risorse_dt/applicazioni/trasversali/stili/ion.rangeSlider.skinPoste.css HTTP/1.1
Host: posteid.poste.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://posteid.poste.it/
Cookie: JSESSIONID=PLcCMGom4L+rxhlYc13H34E-.portal5; id-P-N=RM
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 08:22:48 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Last-Modified: Wed, 17 Apr 2024 16:19:10 GMT
ETag: W/"661ff67e-864"
Expires: Tue, 07 May 2024 09:22:48 GMT
X-Src: NginxRM
Pragma: public
Cache-Control: max-age=3600, public
Content-Encoding: gzip
|
|
| posteid.poste.it/risorse_dt/condivise/javascript/jquery.min.js | 4.232.8.16 | 200 OK | 39 kB |
URL GET HTTP/1.1posteid.poste.it/risorse_dt/condivise/javascript/jquery.min.js IP4.232.8.16:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://posteid.poste.it/ CertificateIssuerGlobalSign nv-sa Subjectposteid.poste.it FingerprintF0:CF:72:CB:03:F6:23:39:79:90:92:AD:FD:A3:CB:D9:B6:83:59:B4 ValidityWed, 12 Apr 2023 10:21:48 GMT - Mon, 13 May 2024 10:21:47 GMT
File typeJavaScript source, ASCII text, with very long lines (32077) Hash4f252523d4af0b478c810c2547a63e19 5a9dcfbef655a2668e78baebeaa8dc6f41d8dabb 668b046d12db350ccba6728890476b3efee53b2f42dbb84743e5e9f1ae0cc404
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Poste Italiane |
GET /risorse_dt/condivise/javascript/jquery.min.js HTTP/1.1
Host: posteid.poste.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://posteid.poste.it/
Cookie: JSESSIONID=PLcCMGom4L+rxhlYc13H34E-.portal5; id-P-N=RM
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 08:22:48 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Last-Modified: Wed, 17 Apr 2024 16:19:02 GMT
ETag: W/"661ff676-17b8b"
Expires: Tue, 07 May 2024 09:22:48 GMT
X-Src: NginxRM
Pragma: public
Cache-Control: max-age=3600, public
Content-Encoding: gzip
|
|
| posteid.poste.it/risorse_dt/condivise/javascript/utilita.js | 4.232.8.16 | 200 OK | 4.1 kB |
URL GET HTTP/1.1posteid.poste.it/risorse_dt/condivise/javascript/utilita.js IP4.232.8.16:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://posteid.poste.it/ CertificateIssuerGlobalSign nv-sa Subjectposteid.poste.it FingerprintF0:CF:72:CB:03:F6:23:39:79:90:92:AD:FD:A3:CB:D9:B6:83:59:B4 ValidityWed, 12 Apr 2023 10:21:48 GMT - Mon, 13 May 2024 10:21:47 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (534) Hash3486bafd95fd30807a81b48c24268675 4b5b08722df5ca44bcd6fdd0f7397a51d68756dd 767058d5c527f3812cd888dee4e52f36b5989f24485d56b6b61fe61516835b0b
GET /risorse_dt/condivise/javascript/utilita.js HTTP/1.1
Host: posteid.poste.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://posteid.poste.it/
Cookie: JSESSIONID=PLcCMGom4L+rxhlYc13H34E-.portal5; id-P-N=RM
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 08:22:48 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Last-Modified: Wed, 17 Apr 2024 16:19:02 GMT
ETag: W/"661ff676-3800"
Expires: Tue, 07 May 2024 09:22:48 GMT
X-Src: NginxRM
Pragma: public
Cache-Control: max-age=3600, public
Content-Encoding: gzip
|
|
| posteid.poste.it/risorse_dt/condivise/javascript/megamenu-pi.js | 4.232.8.16 | 200 OK | 4.0 kB |
URL GET HTTP/1.1posteid.poste.it/risorse_dt/condivise/javascript/megamenu-pi.js IP4.232.8.16:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://posteid.poste.it/ CertificateIssuerGlobalSign nv-sa Subjectposteid.poste.it FingerprintF0:CF:72:CB:03:F6:23:39:79:90:92:AD:FD:A3:CB:D9:B6:83:59:B4 ValidityWed, 12 Apr 2023 10:21:48 GMT - Mon, 13 May 2024 10:21:47 GMT
File typeJavaScript source, Unicode text, UTF-8 text Hashd51ea818bc8ca8c5306e2b393d19ee3f a47c8ef5b499e1221250aa3aced1ed772aba541d 2057ec53754d9d45bf04c0e74852cbe3ccadf192cb4150bd8015698eda15c3ea
GET /risorse_dt/condivise/javascript/megamenu-pi.js HTTP/1.1
Host: posteid.poste.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://posteid.poste.it/
Cookie: JSESSIONID=PLcCMGom4L+rxhlYc13H34E-.portal5; id-P-N=RM
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 08:22:48 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Last-Modified: Wed, 17 Apr 2024 16:19:02 GMT
ETag: W/"661ff676-39d0"
Expires: Tue, 07 May 2024 09:22:48 GMT
X-Src: NginxRM
Pragma: public
Cache-Control: max-age=3600, public
Content-Encoding: gzip
|
|
| posteid.poste.it/risorse_dt/condivise/javascript/poste-it.js | 4.232.8.16 | 200 OK | 1.8 kB |
URL GET HTTP/1.1posteid.poste.it/risorse_dt/condivise/javascript/poste-it.js IP4.232.8.16:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://posteid.poste.it/ CertificateIssuerGlobalSign nv-sa Subjectposteid.poste.it FingerprintF0:CF:72:CB:03:F6:23:39:79:90:92:AD:FD:A3:CB:D9:B6:83:59:B4 ValidityWed, 12 Apr 2023 10:21:48 GMT - Mon, 13 May 2024 10:21:47 GMT
File typeJavaScript source, ASCII text, with very long lines (326) Hash11ed8d787ab28bb7faad321627cbf050 a82e0d6e34c4c166a1d0eb05907cbca2db830886 ee466faaa33a9e0c8786659f3a54c09fb056815dac6059867937a31797fa7929
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Poste Italiane |
GET /risorse_dt/condivise/javascript/poste-it.js HTTP/1.1
Host: posteid.poste.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://posteid.poste.it/
Cookie: JSESSIONID=PLcCMGom4L+rxhlYc13H34E-.portal5; id-P-N=RM
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 08:22:48 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Last-Modified: Wed, 17 Apr 2024 16:19:02 GMT
ETag: W/"661ff676-15d4"
Expires: Tue, 07 May 2024 09:22:48 GMT
X-Src: NginxRM
Pragma: public
Cache-Control: max-age=3600, public
Content-Encoding: gzip
|
|
| posteid.poste.it/risorse_dt/condivise/javascript/scroll-pi.js | 4.232.8.16 | 200 OK | 2.1 kB |
URL GET HTTP/1.1posteid.poste.it/risorse_dt/condivise/javascript/scroll-pi.js IP4.232.8.16:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://posteid.poste.it/ CertificateIssuerGlobalSign nv-sa Subjectposteid.poste.it FingerprintF0:CF:72:CB:03:F6:23:39:79:90:92:AD:FD:A3:CB:D9:B6:83:59:B4 ValidityWed, 12 Apr 2023 10:21:48 GMT - Mon, 13 May 2024 10:21:47 GMT
File typeJavaScript source, ASCII text Hashccaba221f9510f995d9b7f9f725bc3e8 b51e46b0b7837220865f52b6711032ee9f114e44 4b0315814b1802fd857e6df6bd5e3f8d1717df0e3b7ee180291f0266aa5c4632
GET /risorse_dt/condivise/javascript/scroll-pi.js HTTP/1.1
Host: posteid.poste.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://posteid.poste.it/
Cookie: JSESSIONID=PLcCMGom4L+rxhlYc13H34E-.portal5; id-P-N=RM
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 08:22:48 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Last-Modified: Wed, 17 Apr 2024 16:19:02 GMT
ETag: W/"661ff676-1cab"
Expires: Tue, 07 May 2024 09:22:48 GMT
X-Src: NginxRM
Pragma: public
Cache-Control: max-age=3600, public
Content-Encoding: gzip
|
|
| posteid.poste.it/risorse_dt/condivise/javascript/nav-tabs-vertical.js | 4.232.8.16 | 200 OK | 140 B |
URL GET HTTP/1.1posteid.poste.it/risorse_dt/condivise/javascript/nav-tabs-vertical.js IP4.232.8.16:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://posteid.poste.it/ CertificateIssuerGlobalSign nv-sa Subjectposteid.poste.it FingerprintF0:CF:72:CB:03:F6:23:39:79:90:92:AD:FD:A3:CB:D9:B6:83:59:B4 ValidityWed, 12 Apr 2023 10:21:48 GMT - Mon, 13 May 2024 10:21:47 GMT
File typeJavaScript source, ASCII text Hashad5bfd2116188f2bc87caeb3adfc68b3 812a85d53bdca10be425cd3d13493b807a2f6e06 4f797645266ad589a9ca66364a80c96998691187482234bd8e6bfb725220f94d
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Poste Italiane |
GET /risorse_dt/condivise/javascript/nav-tabs-vertical.js HTTP/1.1
Host: posteid.poste.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://posteid.poste.it/
Cookie: JSESSIONID=PLcCMGom4L+rxhlYc13H34E-.portal5; id-P-N=RM
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 08:22:48 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Last-Modified: Wed, 17 Apr 2024 16:19:02 GMT
ETag: W/"661ff676-9e"
Expires: Tue, 07 May 2024 09:22:48 GMT
X-Src: NginxRM
Pragma: public
Cache-Control: max-age=3600, public
Content-Encoding: gzip
|
|
| posteid.poste.it/risorse_dt/condivise/javascript/slick.min.js | 4.232.8.16 | 200 OK | 13 kB |
URL GET HTTP/1.1posteid.poste.it/risorse_dt/condivise/javascript/slick.min.js IP4.232.8.16:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://posteid.poste.it/ CertificateIssuerGlobalSign nv-sa Subjectposteid.poste.it FingerprintF0:CF:72:CB:03:F6:23:39:79:90:92:AD:FD:A3:CB:D9:B6:83:59:B4 ValidityWed, 12 Apr 2023 10:21:48 GMT - Mon, 13 May 2024 10:21:47 GMT
File typeJavaScript source, ASCII text, with very long lines (32076) Hashb53bdfc29e18f4d493d775a8023fbdc8 e9fcbcc4fa70cba093b81d982a1b78509414cef7 e02af7df9a190d88380e2dcec2050ecaa493ae2d23526dbeec67f6907df3a752
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Poste Italiane |
GET /risorse_dt/condivise/javascript/slick.min.js HTTP/1.1
Host: posteid.poste.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://posteid.poste.it/
Cookie: JSESSIONID=PLcCMGom4L+rxhlYc13H34E-.portal5; id-P-N=RM
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 08:22:48 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Last-Modified: Wed, 17 Apr 2024 16:19:02 GMT
ETag: W/"661ff676-a3e1"
Expires: Tue, 07 May 2024 09:22:48 GMT
X-Src: NginxRM
Pragma: public
Cache-Control: max-age=3600, public
Content-Encoding: gzip
|
|
| posteid.poste.it/risorse_dt/applicazioni/trasversali/javascript/custom-form-element.js | 4.232.8.16 | 200 OK | 1.7 kB |
URL GET HTTP/1.1posteid.poste.it/risorse_dt/applicazioni/trasversali/javascript/custom-form-element.js IP4.232.8.16:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://posteid.poste.it/ CertificateIssuerGlobalSign nv-sa Subjectposteid.poste.it FingerprintF0:CF:72:CB:03:F6:23:39:79:90:92:AD:FD:A3:CB:D9:B6:83:59:B4 ValidityWed, 12 Apr 2023 10:21:48 GMT - Mon, 13 May 2024 10:21:47 GMT
File typeJavaScript source, ASCII text, with very long lines (338) Hash0db4764d4e4e66899267d79703fe99ce 816c19ddfe3088858714d0ba55a646f5df09321a aa3b054914a360287080d0bf7946f5fc59aab7ed99e2299ba2fc94c16f29f075
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Poste Italiane |
GET /risorse_dt/applicazioni/trasversali/javascript/custom-form-element.js HTTP/1.1
Host: posteid.poste.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://posteid.poste.it/
Cookie: JSESSIONID=PLcCMGom4L+rxhlYc13H34E-.portal5; id-P-N=RM
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 08:22:48 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Last-Modified: Wed, 17 Apr 2024 16:19:10 GMT
ETag: W/"661ff67e-1aaf"
Expires: Tue, 07 May 2024 09:22:48 GMT
X-Src: NginxRM
Pragma: public
Cache-Control: max-age=3600, public
Content-Encoding: gzip
|
|
| posteid.poste.it/risorse_dt/condivise/javascript/jquery.hc-sticky.min.js | 4.232.8.16 | 200 OK | 3.5 kB |
URL GET HTTP/1.1posteid.poste.it/risorse_dt/condivise/javascript/jquery.hc-sticky.min.js IP4.232.8.16:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://posteid.poste.it/ CertificateIssuerGlobalSign nv-sa Subjectposteid.poste.it FingerprintF0:CF:72:CB:03:F6:23:39:79:90:92:AD:FD:A3:CB:D9:B6:83:59:B4 ValidityWed, 12 Apr 2023 10:21:48 GMT - Mon, 13 May 2024 10:21:47 GMT
File typeJavaScript source, ASCII text, with very long lines (8423) Hash0cef027039bf8251fa53f22336981780 02f550f2117d54683191a964e0b54f3c253bb1b3 ce237a2bc80dd06901d9d66d3d6fd1a634157389d2daeabb377caab879ce3a02
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Poste Italiane |
GET /risorse_dt/condivise/javascript/jquery.hc-sticky.min.js HTTP/1.1
Host: posteid.poste.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://posteid.poste.it/
Cookie: JSESSIONID=PLcCMGom4L+rxhlYc13H34E-.portal5; id-P-N=RM
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 08:22:48 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Last-Modified: Wed, 17 Apr 2024 16:19:02 GMT
ETag: W/"661ff676-22b5"
Expires: Tue, 07 May 2024 09:22:48 GMT
X-Src: NginxRM
Pragma: public
Cache-Control: max-age=3600, public
Content-Encoding: gzip
|
|
| posteid.poste.it/risorse_dt/condivise/javascript/owl.carousel.min.js | 4.232.8.16 | 200 OK | 13 kB |
URL GET HTTP/1.1posteid.poste.it/risorse_dt/condivise/javascript/owl.carousel.min.js IP4.232.8.16:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://posteid.poste.it/ CertificateIssuerGlobalSign nv-sa Subjectposteid.poste.it FingerprintF0:CF:72:CB:03:F6:23:39:79:90:92:AD:FD:A3:CB:D9:B6:83:59:B4 ValidityWed, 12 Apr 2023 10:21:48 GMT - Mon, 13 May 2024 10:21:47 GMT
File typeJavaScript source, ASCII text, with very long lines (32068) Hashffaa3c82ad2c6e216e68aca44746e1be 2fa7c468110fa68f1f3df6718daf971871623ee9 83553d22ccd56e5576d544f6ba93475c712b3c02d312893eea2acc16de5fcf91
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Poste Italiane |
GET /risorse_dt/condivise/javascript/owl.carousel.min.js HTTP/1.1
Host: posteid.poste.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://posteid.poste.it/
Cookie: JSESSIONID=PLcCMGom4L+rxhlYc13H34E-.portal5; id-P-N=RM
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 08:22:48 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Last-Modified: Wed, 17 Apr 2024 16:19:02 GMT
ETag: W/"661ff676-9dd1"
Expires: Tue, 07 May 2024 09:22:48 GMT
X-Src: NginxRM
Pragma: public
Cache-Control: max-age=3600, public
Content-Encoding: gzip
|
|
| posteid.poste.it/risorse_dt/applicazioni/trasversali/javascript/bootstrap-datepicker.js | 4.232.8.16 | 200 OK | 4.7 kB |
URL GET HTTP/1.1posteid.poste.it/risorse_dt/applicazioni/trasversali/javascript/bootstrap-datepicker.js IP4.232.8.16:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://posteid.poste.it/ CertificateIssuerGlobalSign nv-sa Subjectposteid.poste.it FingerprintF0:CF:72:CB:03:F6:23:39:79:90:92:AD:FD:A3:CB:D9:B6:83:59:B4 ValidityWed, 12 Apr 2023 10:21:48 GMT - Mon, 13 May 2024 10:21:47 GMT
File typeJavaScript source, Unicode text, UTF-8 text Hashe21cf7b7d42f324a8cc56b77ef9b878c 965e5a5ec4835db3784bd742c4261211e711a776 f74a6823a607f980a6b4ac8eff1676503096944f2118fe05303a46ce4bf37e88
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Poste Italiane |
GET /risorse_dt/applicazioni/trasversali/javascript/bootstrap-datepicker.js HTTP/1.1
Host: posteid.poste.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://posteid.poste.it/
Cookie: JSESSIONID=PLcCMGom4L+rxhlYc13H34E-.portal5; id-P-N=RM
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 08:22:48 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Last-Modified: Wed, 17 Apr 2024 16:19:12 GMT
ETag: W/"661ff680-369e"
Expires: Tue, 07 May 2024 09:22:48 GMT
X-Src: NginxRM
Pragma: public
Cache-Control: max-age=3600, public
Content-Encoding: gzip
|
|
| posteid.poste.it/risorse_dt/condivise/javascript/jquery.mobile.custom.min.js | 4.232.8.16 | 200 OK | 3.1 kB |
URL GET HTTP/1.1posteid.poste.it/risorse_dt/condivise/javascript/jquery.mobile.custom.min.js IP4.232.8.16:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://posteid.poste.it/ CertificateIssuerGlobalSign nv-sa Subjectposteid.poste.it FingerprintF0:CF:72:CB:03:F6:23:39:79:90:92:AD:FD:A3:CB:D9:B6:83:59:B4 ValidityWed, 12 Apr 2023 10:21:48 GMT - Mon, 13 May 2024 10:21:47 GMT
File typeJavaScript source, ASCII text, with very long lines (7687) Hash74ee4c679b03074b55a1da9bbbe29cf5 745701d8ab39733f989313a5747c54cf3248eb5b 5c2f6c5d5cd0fe0ecfa24b844f841c8a73d8baaafb827ec413afa41335aa1c47
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Poste Italiane |
GET /risorse_dt/condivise/javascript/jquery.mobile.custom.min.js HTTP/1.1
Host: posteid.poste.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://posteid.poste.it/
Cookie: JSESSIONID=PLcCMGom4L+rxhlYc13H34E-.portal5; id-P-N=RM
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 08:22:48 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Last-Modified: Wed, 17 Apr 2024 16:19:02 GMT
ETag: W/"661ff676-1e68"
Expires: Tue, 07 May 2024 09:22:48 GMT
X-Src: NginxRM
Pragma: public
Cache-Control: max-age=3600, public
Content-Encoding: gzip
|
|
| posteid.poste.it/risorse_dt/applicazioni/trasversali/javascript/ion.rangeSlider.min.js | 4.232.8.16 | 200 OK | 10 kB |
URL GET HTTP/1.1posteid.poste.it/risorse_dt/applicazioni/trasversali/javascript/ion.rangeSlider.min.js IP4.232.8.16:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://posteid.poste.it/ CertificateIssuerGlobalSign nv-sa Subjectposteid.poste.it FingerprintF0:CF:72:CB:03:F6:23:39:79:90:92:AD:FD:A3:CB:D9:B6:83:59:B4 ValidityWed, 12 Apr 2023 10:21:48 GMT - Mon, 13 May 2024 10:21:47 GMT
File typeJavaScript source, Unicode text, UTF-8 (with BOM) text, with very long lines (764), with CRLF line terminators Hashe33908f3af1c808de197c1b54eb40b48 acaa154841ee96e64d9ba222db07406d8853e4fa 27cfa3be6fcaf6d4e2fe4ac96f62e132de3930ed153eb90df2ebf385ce2799fa
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Poste Italiane |
GET /risorse_dt/applicazioni/trasversali/javascript/ion.rangeSlider.min.js HTTP/1.1
Host: posteid.poste.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://posteid.poste.it/
Cookie: JSESSIONID=PLcCMGom4L+rxhlYc13H34E-.portal5; id-P-N=RM
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 08:22:48 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Last-Modified: Wed, 17 Apr 2024 16:19:12 GMT
ETag: W/"661ff680-9848"
Expires: Tue, 07 May 2024 09:22:48 GMT
X-Src: NginxRM
Pragma: public
Cache-Control: max-age=3600, public
Content-Encoding: gzip
|
|
| posteid.poste.it/risorse_dt/applicazioni/trasversali/javascript/jquery.toaster.js | 4.232.8.16 | 200 OK | 1.8 kB |
URL GET HTTP/1.1posteid.poste.it/risorse_dt/applicazioni/trasversali/javascript/jquery.toaster.js IP4.232.8.16:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://posteid.poste.it/ CertificateIssuerGlobalSign nv-sa Subjectposteid.poste.it FingerprintF0:CF:72:CB:03:F6:23:39:79:90:92:AD:FD:A3:CB:D9:B6:83:59:B4 ValidityWed, 12 Apr 2023 10:21:48 GMT - Mon, 13 May 2024 10:21:47 GMT
File typeJavaScript source, ASCII text Hash730373d84e992f2bcea73b6f3ddad63a 6317dc75b1317073e4b2120f62cfcf35f19e4b86 4bb90774d0dfba44df31b108e033668303bb955b8c7a2398b4a825739cc20dbf
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Poste Italiane |
GET /risorse_dt/applicazioni/trasversali/javascript/jquery.toaster.js HTTP/1.1
Host: posteid.poste.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://posteid.poste.it/
Cookie: JSESSIONID=PLcCMGom4L+rxhlYc13H34E-.portal5; id-P-N=RM
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 08:22:48 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Last-Modified: Wed, 17 Apr 2024 16:19:10 GMT
ETag: W/"661ff67e-1677"
Expires: Tue, 07 May 2024 09:22:48 GMT
X-Src: NginxRM
Pragma: public
Cache-Control: max-age=3600, public
Content-Encoding: gzip
|
|
| posteid.poste.it/risorse_dt/applicazioni/trasversali/javascript/utilita-app.js | 4.232.8.16 | 200 OK | 1.0 kB |
URL GET HTTP/1.1posteid.poste.it/risorse_dt/applicazioni/trasversali/javascript/utilita-app.js IP4.232.8.16:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://posteid.poste.it/ CertificateIssuerGlobalSign nv-sa Subjectposteid.poste.it FingerprintF0:CF:72:CB:03:F6:23:39:79:90:92:AD:FD:A3:CB:D9:B6:83:59:B4 ValidityWed, 12 Apr 2023 10:21:48 GMT - Mon, 13 May 2024 10:21:47 GMT
File typeJavaScript source, ASCII text Hash9aa07ea97efef38c156c5065ec6b040e 3d25ced0d2bbac415a0f583f54bc270b7b051a45 9bdd42402354335825af6f1b45bb83f645c16199d4bc7ee5f428efb3dbfef811
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Poste Italiane |
GET /risorse_dt/applicazioni/trasversali/javascript/utilita-app.js HTTP/1.1
Host: posteid.poste.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://posteid.poste.it/
Cookie: JSESSIONID=PLcCMGom4L+rxhlYc13H34E-.portal5; id-P-N=RM
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 08:22:48 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Last-Modified: Wed, 17 Apr 2024 16:19:12 GMT
ETag: W/"661ff680-ba7"
Expires: Tue, 07 May 2024 09:22:48 GMT
X-Src: NginxRM
Pragma: public
Cache-Control: max-age=3600, public
Content-Encoding: gzip
|
|
| posteid.poste.it/risorse_dt/applicazioni/trasversali/javascript/bootstrap-tagsinput.js | 4.232.8.16 | 200 OK | 6.7 kB |
URL GET HTTP/1.1posteid.poste.it/risorse_dt/applicazioni/trasversali/javascript/bootstrap-tagsinput.js IP4.232.8.16:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://posteid.poste.it/ CertificateIssuerGlobalSign nv-sa Subjectposteid.poste.it FingerprintF0:CF:72:CB:03:F6:23:39:79:90:92:AD:FD:A3:CB:D9:B6:83:59:B4 ValidityWed, 12 Apr 2023 10:21:48 GMT - Mon, 13 May 2024 10:21:47 GMT
File typeJavaScript source, ASCII text Hashec8724de2aa187526b21583980ed0c9f 10a809a636afcfa4b7da8c55efb12fdd9725d18a fd14001068f254a91096e538d6a910214dd5d5b75221380a772dafc851540bf7
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Poste Italiane |
GET /risorse_dt/applicazioni/trasversali/javascript/bootstrap-tagsinput.js HTTP/1.1
Host: posteid.poste.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://posteid.poste.it/
Cookie: JSESSIONID=PLcCMGom4L+rxhlYc13H34E-.portal5; id-P-N=RM
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 08:22:48 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Last-Modified: Wed, 17 Apr 2024 16:19:12 GMT
ETag: W/"661ff680-5387"
Expires: Tue, 07 May 2024 09:22:48 GMT
X-Src: NginxRM
Pragma: public
Cache-Control: max-age=3600, public
Content-Encoding: gzip
|
|
| posteid.poste.it/risorse/portal/js/jquery.json.min.js | 4.232.8.16 | 200 OK | 1.0 kB |
URL GET HTTP/1.1posteid.poste.it/risorse/portal/js/jquery.json.min.js IP4.232.8.16:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://posteid.poste.it/ CertificateIssuerGlobalSign nv-sa Subjectposteid.poste.it FingerprintF0:CF:72:CB:03:F6:23:39:79:90:92:AD:FD:A3:CB:D9:B6:83:59:B4 ValidityWed, 12 Apr 2023 10:21:48 GMT - Mon, 13 May 2024 10:21:47 GMT
File typeJavaScript source, ASCII text, with very long lines (1859), with CRLF line terminators Hashdd961b85d9825eae652418f6e899d2bd 548103613b52ffe248d4de82983595c23ea4cd05 a355a74c51c191798791db350112ea67813a45faa05279fa47480a48cd497226
GET /risorse/portal/js/jquery.json.min.js HTTP/1.1
Host: posteid.poste.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://posteid.poste.it/
Cookie: JSESSIONID=PLcCMGom4L+rxhlYc13H34E-.portal5; id-P-N=RM
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 08:22:48 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Last-Modified: Wed, 17 Apr 2024 16:19:22 GMT
ETag: W/"661ff68a-786"
Expires: Tue, 07 May 2024 09:22:48 GMT
X-Src: NginxRM
Pragma: public
Cache-Control: max-age=3600, public
Content-Encoding: gzip
|
|
| posteid.poste.it/risorse/portal/js/identificationRAO.js | 4.232.8.16 | 200 OK | 1.2 kB |
URL GET HTTP/1.1posteid.poste.it/risorse/portal/js/identificationRAO.js IP4.232.8.16:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://posteid.poste.it/ CertificateIssuerGlobalSign nv-sa Subjectposteid.poste.it FingerprintF0:CF:72:CB:03:F6:23:39:79:90:92:AD:FD:A3:CB:D9:B6:83:59:B4 ValidityWed, 12 Apr 2023 10:21:48 GMT - Mon, 13 May 2024 10:21:47 GMT
File typeJavaScript source, ASCII text, with CRLF line terminators Hashfab4db2af6a3507434a8daf191926cf9 2a8b257c6f685a515d1f6d5a1023a892769c3435 3af27e104f251ebc3fdb70aa6b18342d7aaa868fae52b3eccc2b451ac33432e9
GET /risorse/portal/js/identificationRAO.js HTTP/1.1
Host: posteid.poste.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://posteid.poste.it/
Cookie: JSESSIONID=PLcCMGom4L+rxhlYc13H34E-.portal5; id-P-N=RM
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 08:22:48 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Last-Modified: Wed, 17 Apr 2024 16:19:22 GMT
ETag: W/"661ff68a-e4a"
Expires: Tue, 07 May 2024 09:22:48 GMT
X-Src: NginxRM
Pragma: public
Cache-Control: max-age=3600, public
Content-Encoding: gzip
|
|
| posteid.poste.it/risorse_dt/condivise/stili/trasversali/configuratore.css | 4.232.8.16 | 200 OK | 906 B |
URL GET HTTP/1.1posteid.poste.it/risorse_dt/condivise/stili/trasversali/configuratore.css IP4.232.8.16:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://posteid.poste.it/ CertificateIssuerGlobalSign nv-sa Subjectposteid.poste.it FingerprintF0:CF:72:CB:03:F6:23:39:79:90:92:AD:FD:A3:CB:D9:B6:83:59:B4 ValidityWed, 12 Apr 2023 10:21:48 GMT - Mon, 13 May 2024 10:21:47 GMT
File typeASCII text, with CRLF line terminators Hash277144ad11638a478548268e8ce65969 26c5fb5c9d6f02c33d07a108bd354ae1b7d7f6d4 ffd457d1ec520e6e18533444bbf3056a6e71510e022d50ff44e4f871940f394d
GET /risorse_dt/condivise/stili/trasversali/configuratore.css HTTP/1.1
Host: posteid.poste.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://posteid.poste.it/
Cookie: JSESSIONID=PLcCMGom4L+rxhlYc13H34E-.portal5; id-P-N=RM
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 08:22:48 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Last-Modified: Wed, 17 Apr 2024 16:19:00 GMT
ETag: W/"661ff674-b7a"
Expires: Tue, 07 May 2024 09:22:48 GMT
X-Src: NginxRM
Pragma: public
Cache-Control: max-age=3600, public
Content-Encoding: gzip
|
|
| posteid.poste.it/risorse/portal/js/upload.js | 4.232.8.16 | 200 OK | 3.1 kB |
URL GET HTTP/1.1posteid.poste.it/risorse/portal/js/upload.js IP4.232.8.16:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://posteid.poste.it/ CertificateIssuerGlobalSign nv-sa Subjectposteid.poste.it FingerprintF0:CF:72:CB:03:F6:23:39:79:90:92:AD:FD:A3:CB:D9:B6:83:59:B4 ValidityWed, 12 Apr 2023 10:21:48 GMT - Mon, 13 May 2024 10:21:47 GMT
File typeJavaScript source, ASCII text, with CRLF line terminators Hashf13017c600a28b01d7157253d1a1b362 76ff31d64394008bd684a20113991365fe6becd8 ed2fd50711cf80b21403b7280e9033c68ef0856a085e8bd7e1276f577dd8ac6e
GET /risorse/portal/js/upload.js HTTP/1.1
Host: posteid.poste.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://posteid.poste.it/
Cookie: JSESSIONID=PLcCMGom4L+rxhlYc13H34E-.portal5; id-P-N=RM
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 08:22:48 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Last-Modified: Wed, 17 Apr 2024 16:19:22 GMT
ETag: W/"661ff68a-2d09"
Expires: Tue, 07 May 2024 09:22:48 GMT
X-Src: NginxRM
Pragma: public
Cache-Control: max-age=3600, public
Content-Encoding: gzip
|
|
| posteid.poste.it/risorse/portal/js/jod-portal.js | 4.232.8.16 | 200 OK | 1.4 kB |
URL GET HTTP/1.1posteid.poste.it/risorse/portal/js/jod-portal.js IP4.232.8.16:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://posteid.poste.it/ CertificateIssuerGlobalSign nv-sa Subjectposteid.poste.it FingerprintF0:CF:72:CB:03:F6:23:39:79:90:92:AD:FD:A3:CB:D9:B6:83:59:B4 ValidityWed, 12 Apr 2023 10:21:48 GMT - Mon, 13 May 2024 10:21:47 GMT
File typeASCII text, with CRLF line terminators Hash2cc3acda4afbab49a96466a5f90dc5e1 bc9b238453a65ecf035ec5997510937d87bd4a5c fc022042f5f824988211363a9f2cb147bed9a4c13000fdea70bd8ec886a6d4cf
GET /risorse/portal/js/jod-portal.js HTTP/1.1
Host: posteid.poste.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://posteid.poste.it/
Cookie: JSESSIONID=PLcCMGom4L+rxhlYc13H34E-.portal5; id-P-N=RM
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 08:22:48 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Last-Modified: Wed, 17 Apr 2024 16:19:22 GMT
ETag: W/"661ff68a-10bb"
Expires: Tue, 07 May 2024 09:22:48 GMT
X-Src: NginxRM
Pragma: public
Cache-Control: max-age=3600, public
Content-Encoding: gzip
|
|
| posteid.poste.it/risorse/portal/js/responsive-tabs-fix.js | 4.232.8.16 | 200 OK | 704 B |
URL GET HTTP/1.1posteid.poste.it/risorse/portal/js/responsive-tabs-fix.js IP4.232.8.16:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://posteid.poste.it/ CertificateIssuerGlobalSign nv-sa Subjectposteid.poste.it FingerprintF0:CF:72:CB:03:F6:23:39:79:90:92:AD:FD:A3:CB:D9:B6:83:59:B4 ValidityWed, 12 Apr 2023 10:21:48 GMT - Mon, 13 May 2024 10:21:47 GMT
File typeJavaScript source, ASCII text, with CRLF line terminators Hashe2cfde895df5ec33665e994db18084b4 9908d08a24244d8b6b4baf6ba6560fe5dcdf0c33 5d600f88a812f62593164256c3752532badd79453649be3b265b2aef8a0d0726
GET /risorse/portal/js/responsive-tabs-fix.js HTTP/1.1
Host: posteid.poste.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://posteid.poste.it/
Cookie: JSESSIONID=PLcCMGom4L+rxhlYc13H34E-.portal5; id-P-N=RM
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 08:22:48 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Last-Modified: Wed, 17 Apr 2024 16:19:22 GMT
ETag: W/"661ff68a-a02"
Expires: Tue, 07 May 2024 09:22:48 GMT
X-Src: NginxRM
Pragma: public
Cache-Control: max-age=3600, public
Content-Encoding: gzip
|
|
| posteid.poste.it/risorse/portal/js/assistenza.js | 4.232.8.16 | 200 OK | 1.1 kB |
URL GET HTTP/1.1posteid.poste.it/risorse/portal/js/assistenza.js IP4.232.8.16:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://posteid.poste.it/ CertificateIssuerGlobalSign nv-sa Subjectposteid.poste.it FingerprintF0:CF:72:CB:03:F6:23:39:79:90:92:AD:FD:A3:CB:D9:B6:83:59:B4 ValidityWed, 12 Apr 2023 10:21:48 GMT - Mon, 13 May 2024 10:21:47 GMT
File typeJavaScript source, ASCII text, with CRLF line terminators Hash749820db87a97a7be0bd7a18fd6e973c 572369f6187f275408ef64fc1861283f0c80c088 6bdacc92de17ba405bbcbf38fd5f9aa6ccd9fe9fb4c4382fd8e40fe61a320048
GET /risorse/portal/js/assistenza.js HTTP/1.1
Host: posteid.poste.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://posteid.poste.it/
Cookie: JSESSIONID=PLcCMGom4L+rxhlYc13H34E-.portal5; id-P-N=RM
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 08:22:48 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Last-Modified: Wed, 17 Apr 2024 16:19:22 GMT
ETag: W/"661ff68a-cbb"
Expires: Tue, 07 May 2024 09:22:48 GMT
X-Src: NginxRM
Pragma: public
Cache-Control: max-age=3600, public
Content-Encoding: gzip
|
|
| posteid.poste.it/risorse/portal/js/posteid-common.js | 4.232.8.16 | 200 OK | 6.8 kB |
URL GET HTTP/1.1posteid.poste.it/risorse/portal/js/posteid-common.js IP4.232.8.16:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://posteid.poste.it/ CertificateIssuerGlobalSign nv-sa Subjectposteid.poste.it FingerprintF0:CF:72:CB:03:F6:23:39:79:90:92:AD:FD:A3:CB:D9:B6:83:59:B4 ValidityWed, 12 Apr 2023 10:21:48 GMT - Mon, 13 May 2024 10:21:47 GMT
File typeJavaScript source, ASCII text, with very long lines (507), with CRLF line terminators Hash28aa80d5e08d4439fd019ee8f302bf3c a73097f0f42c00e642dfe29c2aa6ca1c84cfeb7b de27a86de3c3acf36a479b6157af6bc7657a8be3c16eea653d7ea322395518b8
GET /risorse/portal/js/posteid-common.js HTTP/1.1
Host: posteid.poste.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://posteid.poste.it/
Cookie: JSESSIONID=PLcCMGom4L+rxhlYc13H34E-.portal5; id-P-N=RM
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 08:22:48 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Last-Modified: Wed, 17 Apr 2024 16:19:22 GMT
ETag: W/"661ff68a-64cd"
Expires: Tue, 07 May 2024 09:22:48 GMT
X-Src: NginxRM
Pragma: public
Cache-Control: max-age=3600, public
Content-Encoding: gzip
|
|
| posteid.poste.it/risorse/applicazioni/posteid/javascript/spid.js | 4.232.8.16 | 200 OK | 751 B |
URL GET HTTP/1.1posteid.poste.it/risorse/applicazioni/posteid/javascript/spid.js IP4.232.8.16:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://posteid.poste.it/ CertificateIssuerGlobalSign nv-sa Subjectposteid.poste.it FingerprintF0:CF:72:CB:03:F6:23:39:79:90:92:AD:FD:A3:CB:D9:B6:83:59:B4 ValidityWed, 12 Apr 2023 10:21:48 GMT - Mon, 13 May 2024 10:21:47 GMT
File typeJavaScript source, ASCII text, with CRLF line terminators Hashb515b9173399d6218fef50dfb09fd74f bbf0e6c50e79bc8bda0490bb1a69c67109668a23 b2d7095363960768f56c57f969b77ca85dd7c239eab7efb71fdeb7c241bc2c13
GET /risorse/applicazioni/posteid/javascript/spid.js HTTP/1.1
Host: posteid.poste.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://posteid.poste.it/
Cookie: JSESSIONID=PLcCMGom4L+rxhlYc13H34E-.portal5; id-P-N=RM
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 08:22:48 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Last-Modified: Wed, 14 Dec 2022 14:55:44 GMT
ETag: W/"6399e3f0-8bb"
Expires: Tue, 07 May 2024 09:22:48 GMT
X-Src: NginxRM
Pragma: public
Cache-Control: max-age=3600, public
Content-Encoding: gzip
|
|
| posteid.poste.it/risorse/portal/js/registration.js | 4.232.8.16 | 200 OK | 26 kB |
URL GET HTTP/1.1posteid.poste.it/risorse/portal/js/registration.js IP4.232.8.16:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://posteid.poste.it/ CertificateIssuerGlobalSign nv-sa Subjectposteid.poste.it FingerprintF0:CF:72:CB:03:F6:23:39:79:90:92:AD:FD:A3:CB:D9:B6:83:59:B4 ValidityWed, 12 Apr 2023 10:21:48 GMT - Mon, 13 May 2024 10:21:47 GMT
File typeJavaScript source, ASCII text, with CRLF, CR line terminators Hash12100ee947166543f1bd6f00029d69bf 1bcaea6adf1715b352ee72c7426cc291db826701 7a801142a529de95a4d501540851d00eb7370c60d9f5cdc978676533b934fc67
GET /risorse/portal/js/registration.js HTTP/1.1
Host: posteid.poste.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://posteid.poste.it/
Cookie: JSESSIONID=PLcCMGom4L+rxhlYc13H34E-.portal5; id-P-N=RM
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 08:22:48 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Last-Modified: Wed, 17 Apr 2024 16:19:22 GMT
ETag: W/"661ff68a-1c517"
Expires: Tue, 07 May 2024 09:22:48 GMT
X-Src: NginxRM
Pragma: public
Cache-Control: max-age=3600, public
Content-Encoding: gzip
|
|
| posteid.poste.it/risorse_dt/condivise/stili/trasversali/typography.css | 4.232.8.16 | 200 OK | 1.6 kB |
URL GET HTTP/1.1posteid.poste.it/risorse_dt/condivise/stili/trasversali/typography.css IP4.232.8.16:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://posteid.poste.it/ CertificateIssuerGlobalSign nv-sa Subjectposteid.poste.it FingerprintF0:CF:72:CB:03:F6:23:39:79:90:92:AD:FD:A3:CB:D9:B6:83:59:B4 ValidityWed, 12 Apr 2023 10:21:48 GMT - Mon, 13 May 2024 10:21:47 GMT
File typeassembler source, ASCII text Hash9bc1f2ccabef97230a29e52bb7d71e2e c2cc92960a2674ffa0c8d32b2133e596b3613630 2a96cd832563fdde56f4c71a663dd68bd9202eeed6a4c2c525e3275e4e68be06
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Poste Italiane |
GET /risorse_dt/condivise/stili/trasversali/typography.css HTTP/1.1
Host: posteid.poste.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://posteid.poste.it/risorse_dt/condivise/stili/trasversali/base.css
Cookie: JSESSIONID=PLcCMGom4L+rxhlYc13H34E-.portal5; id-P-N=RM
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 08:22:48 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Last-Modified: Wed, 17 Apr 2024 16:19:00 GMT
ETag: W/"661ff674-1403"
Expires: Tue, 07 May 2024 09:22:48 GMT
X-Src: NginxRM
Pragma: public
Cache-Control: max-age=3600, public
Content-Encoding: gzip
|
|
| posteid.poste.it/risorse/condivise/javascript/cookie_adv_pi.js | 4.232.8.16 | 200 OK | 532 B |
URL GET HTTP/1.1posteid.poste.it/risorse/condivise/javascript/cookie_adv_pi.js IP4.232.8.16:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://posteid.poste.it/ CertificateIssuerGlobalSign nv-sa Subjectposteid.poste.it FingerprintF0:CF:72:CB:03:F6:23:39:79:90:92:AD:FD:A3:CB:D9:B6:83:59:B4 ValidityWed, 12 Apr 2023 10:21:48 GMT - Mon, 13 May 2024 10:21:47 GMT
File typeASCII text, with CRLF line terminators Hashbbe11e1eddd258baf621e831f6adc03b aeac80c3b26082a068b76ffa0835b152b7e6178f 767a1b3f198d5452e6f7e9f465fb65eef8e69942ba0648f6b6c56412974f78ba
GET /risorse/condivise/javascript/cookie_adv_pi.js HTTP/1.1
Host: posteid.poste.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://posteid.poste.it/
Cookie: JSESSIONID=PLcCMGom4L+rxhlYc13H34E-.portal5; id-P-N=RM
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 08:22:48 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Last-Modified: Wed, 14 Dec 2022 14:55:42 GMT
ETag: W/"6399e3ee-4d3"
Expires: Tue, 07 May 2024 09:22:48 GMT
X-Src: NginxRM
Pragma: public
Cache-Control: max-age=3600, public
Content-Encoding: gzip
|
|
| posteid.poste.it/risorse_dt/condivise/javascript/start-script.js | 4.232.8.16 | 200 OK | 5.8 kB |
URL GET HTTP/1.1posteid.poste.it/risorse_dt/condivise/javascript/start-script.js IP4.232.8.16:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://posteid.poste.it/ CertificateIssuerGlobalSign nv-sa Subjectposteid.poste.it FingerprintF0:CF:72:CB:03:F6:23:39:79:90:92:AD:FD:A3:CB:D9:B6:83:59:B4 ValidityWed, 12 Apr 2023 10:21:48 GMT - Mon, 13 May 2024 10:21:47 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (306) Hash34d8e2851b83953f25ab8462377182cc ff7baec28e44681878445284bc02f2fe6c34dc9a 2682e3a4784a44e88a83c3862d056ba1f4b64e7b801177550b0ef58c7361529d
GET /risorse_dt/condivise/javascript/start-script.js HTTP/1.1
Host: posteid.poste.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://posteid.poste.it/
Cookie: JSESSIONID=PLcCMGom4L+rxhlYc13H34E-.portal5; id-P-N=RM
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 08:22:48 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Last-Modified: Wed, 17 Apr 2024 16:19:02 GMT
ETag: W/"661ff676-574e"
Expires: Tue, 07 May 2024 09:22:48 GMT
X-Src: NginxRM
Pragma: public
Cache-Control: max-age=3600, public
Content-Encoding: gzip
|
|
| posteid.poste.it/risorse_dt/condivise/stili/trasversali/fonts.css | 4.232.8.16 | 200 OK | 664 B |
URL GET HTTP/1.1posteid.poste.it/risorse_dt/condivise/stili/trasversali/fonts.css IP4.232.8.16:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://posteid.poste.it/ CertificateIssuerGlobalSign nv-sa Subjectposteid.poste.it FingerprintF0:CF:72:CB:03:F6:23:39:79:90:92:AD:FD:A3:CB:D9:B6:83:59:B4 ValidityWed, 12 Apr 2023 10:21:48 GMT - Mon, 13 May 2024 10:21:47 GMT
Hash88858a564dd9e9a180511a7303a03644 7613345cb1df3bfac7759f3e77618e0f43b27e90 12311850292759a6b163bfabd7da3f5d09332b8fae203996782f86a03ad2e808
GET /risorse_dt/condivise/stili/trasversali/fonts.css HTTP/1.1
Host: posteid.poste.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://posteid.poste.it/risorse_dt/condivise/stili/trasversali/base.css
Cookie: JSESSIONID=PLcCMGom4L+rxhlYc13H34E-.portal5; id-P-N=RM
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 08:22:48 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Last-Modified: Wed, 17 Apr 2024 16:19:00 GMT
ETag: W/"661ff674-13f0"
Expires: Tue, 07 May 2024 09:22:48 GMT
X-Src: NginxRM
Pragma: public
Cache-Control: max-age=3600, public
Content-Encoding: gzip
|
|
| posteid.poste.it/risorse_dt/bootstrap/js/ie10-viewport-bug-workaround.js | 4.232.8.16 | 200 OK | 447 B |
URL GET HTTP/1.1posteid.poste.it/risorse_dt/bootstrap/js/ie10-viewport-bug-workaround.js IP4.232.8.16:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://posteid.poste.it/ CertificateIssuerGlobalSign nv-sa Subjectposteid.poste.it FingerprintF0:CF:72:CB:03:F6:23:39:79:90:92:AD:FD:A3:CB:D9:B6:83:59:B4 ValidityWed, 12 Apr 2023 10:21:48 GMT - Mon, 13 May 2024 10:21:47 GMT
File typeJavaScript source, ASCII text Hashb5a0dd7ce1f7c1c6b80b5abe13308dd2 6cc4835430ac4ba8845fd02efdb5688166a5ed8a ce01c41255d7e61cc44e865184559085737a98cf6911ef67f915692152b88852
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Poste Italiane |
GET /risorse_dt/bootstrap/js/ie10-viewport-bug-workaround.js HTTP/1.1
Host: posteid.poste.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://posteid.poste.it/
Cookie: JSESSIONID=PLcCMGom4L+rxhlYc13H34E-.portal5; id-P-N=RM
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 08:22:48 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Last-Modified: Wed, 17 Apr 2024 16:19:10 GMT
ETag: W/"661ff67e-2b6"
Expires: Tue, 07 May 2024 09:22:48 GMT
X-Src: NginxRM
Pragma: public
Cache-Control: max-age=3600, public
Content-Encoding: gzip
|
|
| posteid.poste.it/risorse_dt/bootstrap/js/bootstrap.js | 4.232.8.16 | 200 OK | 18 kB |
URL GET HTTP/1.1posteid.poste.it/risorse_dt/bootstrap/js/bootstrap.js IP4.232.8.16:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://posteid.poste.it/ CertificateIssuerGlobalSign nv-sa Subjectposteid.poste.it FingerprintF0:CF:72:CB:03:F6:23:39:79:90:92:AD:FD:A3:CB:D9:B6:83:59:B4 ValidityWed, 12 Apr 2023 10:21:48 GMT - Mon, 13 May 2024 10:21:47 GMT
File typeJavaScript source, ASCII text Hashe3676b6eb90f0f6739c89d56a3efa245 83188f24cfbd8e33b69b23139202c0cf2f390063 31d80f65a2c078aa3ca5051504f29d8986df61f04bc998036527374eef1c286b
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Poste Italiane |
GET /risorse_dt/bootstrap/js/bootstrap.js HTTP/1.1
Host: posteid.poste.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://posteid.poste.it/
Cookie: JSESSIONID=PLcCMGom4L+rxhlYc13H34E-.portal5; id-P-N=RM
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 08:22:48 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Last-Modified: Wed, 17 Apr 2024 16:19:10 GMT
ETag: W/"661ff67e-10e5e"
Expires: Tue, 07 May 2024 09:22:48 GMT
X-Src: NginxRM
Pragma: public
Cache-Control: max-age=3600, public
Content-Encoding: gzip
|
|
| posteid.poste.it/risorse_dt/condivise/stili/trasversali/spaces.css | 4.232.8.16 | 200 OK | 4.0 kB |
URL GET HTTP/1.1posteid.poste.it/risorse_dt/condivise/stili/trasversali/spaces.css IP4.232.8.16:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://posteid.poste.it/ CertificateIssuerGlobalSign nv-sa Subjectposteid.poste.it FingerprintF0:CF:72:CB:03:F6:23:39:79:90:92:AD:FD:A3:CB:D9:B6:83:59:B4 ValidityWed, 12 Apr 2023 10:21:48 GMT - Mon, 13 May 2024 10:21:47 GMT
Hasha0339ef2039b90034b16e341e508b5e8 dab67a84e5a8228a6f9ed90f05b8a7b983912b3c 9fb634a5bbfbee4fc2503595fa18a98142ca8cf0bb29984d065edfeef0006bdd
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Poste Italiane |
GET /risorse_dt/condivise/stili/trasversali/spaces.css HTTP/1.1
Host: posteid.poste.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://posteid.poste.it/risorse_dt/condivise/stili/trasversali/base.css
Cookie: JSESSIONID=PLcCMGom4L+rxhlYc13H34E-.portal5; id-P-N=RM
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 08:22:48 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Last-Modified: Wed, 17 Apr 2024 16:19:00 GMT
ETag: W/"661ff674-7502"
Expires: Tue, 07 May 2024 09:22:48 GMT
X-Src: NginxRM
Pragma: public
Cache-Control: max-age=3600, public
Content-Encoding: gzip
|
|
| posteid.poste.it/risorse_dt/condivise/stili/trasversali/alignment.css | 4.232.8.16 | 200 OK | 569 B |
URL GET HTTP/1.1posteid.poste.it/risorse_dt/condivise/stili/trasversali/alignment.css IP4.232.8.16:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://posteid.poste.it/ CertificateIssuerGlobalSign nv-sa Subjectposteid.poste.it FingerprintF0:CF:72:CB:03:F6:23:39:79:90:92:AD:FD:A3:CB:D9:B6:83:59:B4 ValidityWed, 12 Apr 2023 10:21:48 GMT - Mon, 13 May 2024 10:21:47 GMT
File typeassembler source, ASCII text Hash2b774691bee7183287e841ed3287c1c1 bb03284b1ee77d718adee2286f8ce20e42f0e9c6 8d4821ff1de6348bb012672849a8205eb9833edde9b1e417f2fa5365261c08bf
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Poste Italiane |
GET /risorse_dt/condivise/stili/trasversali/alignment.css HTTP/1.1
Host: posteid.poste.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://posteid.poste.it/risorse_dt/condivise/stili/trasversali/base.css
Cookie: JSESSIONID=PLcCMGom4L+rxhlYc13H34E-.portal5; id-P-N=RM
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 08:22:48 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Last-Modified: Wed, 17 Apr 2024 16:19:00 GMT
ETag: W/"661ff674-aab"
Expires: Tue, 07 May 2024 09:22:48 GMT
X-Src: NginxRM
Pragma: public
Cache-Control: max-age=3600, public
Content-Encoding: gzip
|
|
| posteid.poste.it/risorse_dt/condivise/stili/trasversali/extra.css | 4.232.8.16 | 200 OK | 721 B |
URL GET HTTP/1.1posteid.poste.it/risorse_dt/condivise/stili/trasversali/extra.css IP4.232.8.16:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://posteid.poste.it/ CertificateIssuerGlobalSign nv-sa Subjectposteid.poste.it FingerprintF0:CF:72:CB:03:F6:23:39:79:90:92:AD:FD:A3:CB:D9:B6:83:59:B4 ValidityWed, 12 Apr 2023 10:21:48 GMT - Mon, 13 May 2024 10:21:47 GMT
Hash6845e4602367a2454bf3a8aa15d014a6 841e011124cb8f568f3c2d8bfcb3013ea6f042fd dc4a581b65b22475fbb99580954525d488986dc35b37b19310d30a0598a32fde
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Poste Italiane |
GET /risorse_dt/condivise/stili/trasversali/extra.css HTTP/1.1
Host: posteid.poste.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://posteid.poste.it/risorse_dt/condivise/stili/trasversali/base.css
Cookie: JSESSIONID=PLcCMGom4L+rxhlYc13H34E-.portal5; id-P-N=RM
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 08:22:48 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Last-Modified: Wed, 17 Apr 2024 16:19:00 GMT
ETag: W/"661ff674-137f"
Expires: Tue, 07 May 2024 09:22:48 GMT
X-Src: NginxRM
Pragma: public
Cache-Control: max-age=3600, public
Content-Encoding: gzip
|
|
| posteid.poste.it/risorse_dt/condivise/stili/trasversali/base-element.css | 4.232.8.16 | 200 OK | 38 kB |
URL GET HTTP/1.1posteid.poste.it/risorse_dt/condivise/stili/trasversali/base-element.css IP4.232.8.16:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://posteid.poste.it/ CertificateIssuerGlobalSign nv-sa Subjectposteid.poste.it FingerprintF0:CF:72:CB:03:F6:23:39:79:90:92:AD:FD:A3:CB:D9:B6:83:59:B4 ValidityWed, 12 Apr 2023 10:21:48 GMT - Mon, 13 May 2024 10:21:47 GMT
Hashf5c3554bcfac14088d7b7309db138438 78487e68ba45d69a114641a2279b5178f0160d72 ed67b3b99fd0284fb7558c4c174386dd99b40e1493819161159bc3153ffe4097
GET /risorse_dt/condivise/stili/trasversali/base-element.css HTTP/1.1
Host: posteid.poste.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://posteid.poste.it/risorse_dt/condivise/stili/trasversali/base.css
Cookie: JSESSIONID=PLcCMGom4L+rxhlYc13H34E-.portal5; id-P-N=RM
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 08:22:48 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx
Last-Modified: Wed, 17 Apr 2024 16:19:00 GMT
ETag: W/"661ff674-30e06"
Expires: Tue, 07 May 2024 09:22:48 GMT
X-Src: NginxRM
Pragma: public
Cache-Control: max-age=3600, public
Content-Encoding: gzip
|
|
| posteid.poste.it/risorse_dt/condivise/immagini/loghi/logo-poste-italiane-small.png | 4.232.8.16 | 200 OK | 5.0 kB |
URL GET HTTP/1.1posteid.poste.it/risorse_dt/condivise/immagini/loghi/logo-poste-italiane-small.png IP4.232.8.16:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://posteid.poste.it/ CertificateIssuerGlobalSign nv-sa Subjectposteid.poste.it FingerprintF0:CF:72:CB:03:F6:23:39:79:90:92:AD:FD:A3:CB:D9:B6:83:59:B4 ValidityWed, 12 Apr 2023 10:21:48 GMT - Mon, 13 May 2024 10:21:47 GMT
File typePNG image data, 110 x 14, 8-bit/color RGBA, non-interlaced Hash0e9962a2babbe39b3725e2a13d7b233d e67105271b1076016a630071a3a231e0084e96ed ccb7ecb1eadb470600c66ed9548f5dd49cfbbbd67eb34f9d4437eeec55c69212
GET /risorse_dt/condivise/immagini/loghi/logo-poste-italiane-small.png HTTP/1.1
Host: posteid.poste.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://posteid.poste.it/
Cookie: JSESSIONID=PLcCMGom4L+rxhlYc13H34E-.portal5; id-P-N=RM
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 08:22:49 GMT
Content-Type: image/png
Content-Length: 4959
Connection: keep-alive
Server: nginx
Last-Modified: Wed, 17 Apr 2024 16:18:54 GMT
ETag: "661ff66e-135f"
Expires: Tue, 07 May 2024 09:22:49 GMT
X-Src: NginxRM
Pragma: public
Cache-Control: max-age=3600, public
Accept-Ranges: bytes
|
|
| posteid.poste.it/risorse_dt/applicazioni/posteid/immagini/accesso.png | 4.232.8.16 | 200 OK | 4.6 kB |
URL GET HTTP/1.1posteid.poste.it/risorse_dt/applicazioni/posteid/immagini/accesso.png IP4.232.8.16:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://posteid.poste.it/ CertificateIssuerGlobalSign nv-sa Subjectposteid.poste.it FingerprintF0:CF:72:CB:03:F6:23:39:79:90:92:AD:FD:A3:CB:D9:B6:83:59:B4 ValidityWed, 12 Apr 2023 10:21:48 GMT - Mon, 13 May 2024 10:21:47 GMT
File typePNG image data, 84 x 88, 8-bit/color RGBA, non-interlaced Hash53794bcddc04e593c6d4c562b3fe374d a5f2854878d806f919846bc8ac0c076cd4631ea7 424e4ada24bf0068f0ea0e761fb7de65fab75abf5b2a5939888ee81819214d78
GET /risorse_dt/applicazioni/posteid/immagini/accesso.png HTTP/1.1
Host: posteid.poste.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://posteid.poste.it/
Cookie: JSESSIONID=PLcCMGom4L+rxhlYc13H34E-.portal5; id-P-N=RM
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 08:22:49 GMT
Content-Type: image/png
Content-Length: 4629
Connection: keep-alive
Server: nginx
Last-Modified: Wed, 17 Apr 2024 16:19:12 GMT
ETag: "661ff680-1215"
Expires: Tue, 07 May 2024 09:22:49 GMT
X-Src: NginxRM
Pragma: public
Cache-Control: max-age=3600, public
Accept-Ranges: bytes
|
|
| posteid.poste.it/risorse/applicazioni/posteid/immagini/logo.png | 4.232.8.16 | 200 OK | 3.0 kB |
URL GET HTTP/1.1posteid.poste.it/risorse/applicazioni/posteid/immagini/logo.png IP4.232.8.16:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://posteid.poste.it/ CertificateIssuerGlobalSign nv-sa Subjectposteid.poste.it FingerprintF0:CF:72:CB:03:F6:23:39:79:90:92:AD:FD:A3:CB:D9:B6:83:59:B4 ValidityWed, 12 Apr 2023 10:21:48 GMT - Mon, 13 May 2024 10:21:47 GMT
File typePNG image data, 172 x 48, 8-bit/color RGBA, non-interlaced Hashd7c23355c8bbfbda3c742c74349ceec5 b6ef4dcbd0e6250a047cc6785d26412a5efff206 5e24a7008ddf3f5b42e07f89a5bdf358e7b767c290b75e143c44c38bf0ab8a6e
GET /risorse/applicazioni/posteid/immagini/logo.png HTTP/1.1
Host: posteid.poste.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://posteid.poste.it/
Cookie: JSESSIONID=PLcCMGom4L+rxhlYc13H34E-.portal5; id-P-N=RM
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 08:22:49 GMT
Content-Type: image/png
Content-Length: 2987
Connection: keep-alive
Server: nginx
Last-Modified: Wed, 14 Dec 2022 14:55:46 GMT
ETag: "6399e3f2-bab"
Expires: Tue, 07 May 2024 09:22:49 GMT
X-Src: NginxRM
Pragma: public
Cache-Control: max-age=3600, public
Accept-Ranges: bytes
|
|
| posteid.poste.it/risorse_dt/condivise/immagini/loghi/logo-poste-italiane-medium.png | 4.232.8.16 | 200 OK | 5.2 kB |
URL GET HTTP/1.1posteid.poste.it/risorse_dt/condivise/immagini/loghi/logo-poste-italiane-medium.png IP4.232.8.16:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://posteid.poste.it/ CertificateIssuerGlobalSign nv-sa Subjectposteid.poste.it FingerprintF0:CF:72:CB:03:F6:23:39:79:90:92:AD:FD:A3:CB:D9:B6:83:59:B4 ValidityWed, 12 Apr 2023 10:21:48 GMT - Mon, 13 May 2024 10:21:47 GMT
File typePNG image data, 128 x 16, 8-bit/color RGBA, non-interlaced Hash9cd2e2f9fc86184757f36a95393cd362 24917b0e502b63c8c79d99f02d4de6a47653cbd1 d26cdfa4e4c99bcd4d99047beff09a62f8e0c955654b7a4968acf1ebdc293cb8
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Poste Italiane |
GET /risorse_dt/condivise/immagini/loghi/logo-poste-italiane-medium.png HTTP/1.1
Host: posteid.poste.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://posteid.poste.it/
Cookie: JSESSIONID=PLcCMGom4L+rxhlYc13H34E-.portal5; id-P-N=RM
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 08:22:49 GMT
Content-Type: image/png
Content-Length: 5213
Connection: keep-alive
Server: nginx
Last-Modified: Wed, 17 Apr 2024 16:18:54 GMT
ETag: "661ff66e-145d"
Expires: Tue, 07 May 2024 09:22:49 GMT
X-Src: NginxRM
Pragma: public
Cache-Control: max-age=3600, public
Accept-Ranges: bytes
|
|
| posteid.poste.it/risorse_dt/applicazioni/posteid/immagini/accedere-ai-servizi-abilitati-spid.png | 4.232.8.16 | 200 OK | 5.4 kB |
URL GET HTTP/1.1posteid.poste.it/risorse_dt/applicazioni/posteid/immagini/accedere-ai-servizi-abilitati-spid.png IP4.232.8.16:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://posteid.poste.it/ CertificateIssuerGlobalSign nv-sa Subjectposteid.poste.it FingerprintF0:CF:72:CB:03:F6:23:39:79:90:92:AD:FD:A3:CB:D9:B6:83:59:B4 ValidityWed, 12 Apr 2023 10:21:48 GMT - Mon, 13 May 2024 10:21:47 GMT
File typePNG image data, 84 x 88, 8-bit/color RGBA, interlaced Hash16cccba5eb27083557d7dcc1758d87b6 8f2daf2cd013009592a3a07d927ba8b10f436396 9259f048383b74ed89f6c2dcd57d0b679bfc1fa407a7c29bd3d95c2e9bd60308
GET /risorse_dt/applicazioni/posteid/immagini/accedere-ai-servizi-abilitati-spid.png HTTP/1.1
Host: posteid.poste.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://posteid.poste.it/
Cookie: JSESSIONID=PLcCMGom4L+rxhlYc13H34E-.portal5; id-P-N=RM
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 08:22:49 GMT
Content-Type: image/png
Content-Length: 5441
Connection: keep-alive
Server: nginx
Last-Modified: Wed, 17 Apr 2024 16:19:12 GMT
ETag: "661ff680-1541"
Expires: Tue, 07 May 2024 09:22:49 GMT
X-Src: NginxRM
Pragma: public
Cache-Control: max-age=3600, public
Accept-Ranges: bytes
|
|
| posteid.poste.it/risorse_dt/condivise/immagini/icone/icone-default-on/ico-info.png | 4.232.8.16 | 200 OK | 705 B |
URL GET HTTP/1.1posteid.poste.it/risorse_dt/condivise/immagini/icone/icone-default-on/ico-info.png IP4.232.8.16:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://posteid.poste.it/ CertificateIssuerGlobalSign nv-sa Subjectposteid.poste.it FingerprintF0:CF:72:CB:03:F6:23:39:79:90:92:AD:FD:A3:CB:D9:B6:83:59:B4 ValidityWed, 12 Apr 2023 10:21:48 GMT - Mon, 13 May 2024 10:21:47 GMT
File typePNG image data, 25 x 24, 8-bit/color RGBA, interlaced Hashf0ee56c69132033b4098018a3b429e70 24348f6452d39b638d89f5d4230d516223d8db44 d3ae497f0bf459a46e4c3d14f9286f6df8d01a5c30fcd142f9adb84b892fd82b
GET /risorse_dt/condivise/immagini/icone/icone-default-on/ico-info.png HTTP/1.1
Host: posteid.poste.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://posteid.poste.it/
Cookie: JSESSIONID=PLcCMGom4L+rxhlYc13H34E-.portal5; id-P-N=RM
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 08:22:49 GMT
Content-Type: image/png
Content-Length: 705
Connection: keep-alive
Server: nginx
Last-Modified: Wed, 17 Apr 2024 16:18:56 GMT
ETag: "661ff670-2c1"
Expires: Tue, 07 May 2024 09:22:49 GMT
X-Src: NginxRM
Pragma: public
Cache-Control: max-age=3600, public
Accept-Ranges: bytes
|
|
| posteid.poste.it/risorse_dt/condivise/immagini/icone/icone-default-on/ico-assistenza-domande-frequenti.png | 4.232.8.16 | 200 OK | 667 B |
URL GET HTTP/1.1posteid.poste.it/risorse_dt/condivise/immagini/icone/icone-default-on/ico-assistenza-domande-frequenti.png IP4.232.8.16:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://posteid.poste.it/ CertificateIssuerGlobalSign nv-sa Subjectposteid.poste.it FingerprintF0:CF:72:CB:03:F6:23:39:79:90:92:AD:FD:A3:CB:D9:B6:83:59:B4 ValidityWed, 12 Apr 2023 10:21:48 GMT - Mon, 13 May 2024 10:21:47 GMT
File typePNG image data, 25 x 24, 8-bit/color RGBA, interlaced Hash8f2852b7bbd38844fca34aa5dcfc888e d1de7c07d00e7194e81b8899b091487254dbbabc e9b0fe003419b3f44b6f5b2d1ca885b2db6681b3916a950a839b2d067d7c93b5
GET /risorse_dt/condivise/immagini/icone/icone-default-on/ico-assistenza-domande-frequenti.png HTTP/1.1
Host: posteid.poste.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://posteid.poste.it/
Cookie: JSESSIONID=PLcCMGom4L+rxhlYc13H34E-.portal5; id-P-N=RM
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 08:22:49 GMT
Content-Type: image/png
Content-Length: 667
Connection: keep-alive
Server: nginx
Last-Modified: Wed, 17 Apr 2024 16:18:56 GMT
ETag: "661ff670-29b"
Expires: Tue, 07 May 2024 09:22:49 GMT
X-Src: NginxRM
Pragma: public
Cache-Control: max-age=3600, public
Accept-Ranges: bytes
|
|
| posteid.poste.it/risorse_dt/condivise/immagini/icone/icone-default-on/ico-chiamaci.png | 4.232.8.16 | 200 OK | 677 B |
URL GET HTTP/1.1posteid.poste.it/risorse_dt/condivise/immagini/icone/icone-default-on/ico-chiamaci.png IP4.232.8.16:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://posteid.poste.it/ CertificateIssuerGlobalSign nv-sa Subjectposteid.poste.it FingerprintF0:CF:72:CB:03:F6:23:39:79:90:92:AD:FD:A3:CB:D9:B6:83:59:B4 ValidityWed, 12 Apr 2023 10:21:48 GMT - Mon, 13 May 2024 10:21:47 GMT
File typePNG image data, 25 x 24, 8-bit/color RGBA, interlaced Hash793af7b683aa2f83ef13f04b46290a7e e43f553eb001023d3c05ee896943a9a58e425ccb 4107c25521da5ee37c5d24e380378112c466e5e3d26925e2e296c7783de26f53
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Poste Italiane |
GET /risorse_dt/condivise/immagini/icone/icone-default-on/ico-chiamaci.png HTTP/1.1
Host: posteid.poste.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://posteid.poste.it/
Cookie: JSESSIONID=PLcCMGom4L+rxhlYc13H34E-.portal5; id-P-N=RM
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 08:22:49 GMT
Content-Type: image/png
Content-Length: 677
Connection: keep-alive
Server: nginx
Last-Modified: Wed, 17 Apr 2024 16:18:56 GMT
ETag: "661ff670-2a5"
Expires: Tue, 07 May 2024 09:22:49 GMT
X-Src: NginxRM
Pragma: public
Cache-Control: max-age=3600, public
Accept-Ranges: bytes
|
|
| posteid.poste.it/risorse_dt/condivise/immagini/generiche/spinner_bianco.gif | 4.232.8.16 | 200 OK | 14 kB |
URL GET HTTP/1.1posteid.poste.it/risorse_dt/condivise/immagini/generiche/spinner_bianco.gif IP4.232.8.16:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://posteid.poste.it/ CertificateIssuerGlobalSign nv-sa Subjectposteid.poste.it FingerprintF0:CF:72:CB:03:F6:23:39:79:90:92:AD:FD:A3:CB:D9:B6:83:59:B4 ValidityWed, 12 Apr 2023 10:21:48 GMT - Mon, 13 May 2024 10:21:47 GMT
File typeGIF image data, version 89a, 150 x 150 Hashc9f73f73610b1dbeb9986b1c776826d4 7fea41894b77024098b46cbe2ba93e8c5ab67872 7a2a801cacf1796cde2505da006cb385ae65cdf0c75f3ac55e87a3653d59482f
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Poste Italiane |
GET /risorse_dt/condivise/immagini/generiche/spinner_bianco.gif HTTP/1.1
Host: posteid.poste.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://posteid.poste.it/
Cookie: JSESSIONID=PLcCMGom4L+rxhlYc13H34E-.portal5; id-P-N=RM
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 08:22:49 GMT
Content-Type: image/gif
Content-Length: 13836
Connection: keep-alive
Server: nginx
Last-Modified: Wed, 17 Apr 2024 16:18:54 GMT
ETag: "661ff66e-360c"
Expires: Tue, 07 May 2024 09:22:49 GMT
X-Src: NginxRM
Pragma: public
Cache-Control: max-age=3600, public
Accept-Ranges: bytes
|
|
| posteid.poste.it/risorse_dt/applicazioni/posteid/immagini/group17@1x.png | 4.232.8.16 | 200 OK | 4.6 kB |
URL GET HTTP/1.1posteid.poste.it/risorse_dt/applicazioni/posteid/immagini/group17@1x.png IP4.232.8.16:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://posteid.poste.it/ CertificateIssuerGlobalSign nv-sa Subjectposteid.poste.it FingerprintF0:CF:72:CB:03:F6:23:39:79:90:92:AD:FD:A3:CB:D9:B6:83:59:B4 ValidityWed, 12 Apr 2023 10:21:48 GMT - Mon, 13 May 2024 10:21:47 GMT
File typePNG image data, 160 x 160, 8-bit/color RGBA, non-interlaced Hashc4a0e59e658ac6b7ceed3767a1354246 702b864c13e8829e19d1a5f4b5177d9a2ea42469 5ca939156ad3dfc415efa1ff9bbda357bc3944edb684ab87d2f14d3790db4636
GET /risorse_dt/applicazioni/posteid/immagini/group17@1x.png HTTP/1.1
Host: posteid.poste.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://posteid.poste.it/
Cookie: JSESSIONID=PLcCMGom4L+rxhlYc13H34E-.portal5; id-P-N=RM
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 08:22:49 GMT
Content-Type: image/png
Content-Length: 4607
Connection: keep-alive
Server: nginx
Last-Modified: Wed, 17 Apr 2024 16:19:12 GMT
ETag: "661ff680-11ff"
Expires: Tue, 07 May 2024 09:22:49 GMT
X-Src: NginxRM
Pragma: public
Cache-Control: max-age=3600, public
Accept-Ranges: bytes
|
|
| posteid.poste.it/risorse_dt/applicazioni/posteid/immagini/attivare-servizio-ritiro-digitale.png | 4.232.8.16 | 200 OK | 20 kB |
URL GET HTTP/1.1posteid.poste.it/risorse_dt/applicazioni/posteid/immagini/attivare-servizio-ritiro-digitale.png IP4.232.8.16:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://posteid.poste.it/ CertificateIssuerGlobalSign nv-sa Subjectposteid.poste.it FingerprintF0:CF:72:CB:03:F6:23:39:79:90:92:AD:FD:A3:CB:D9:B6:83:59:B4 ValidityWed, 12 Apr 2023 10:21:48 GMT - Mon, 13 May 2024 10:21:47 GMT
File typePNG image data, 84 x 88, 8-bit/color RGBA, interlaced Hash0b55477fe790d54e42b3d499873e8080 39cf1d66f6ea16b6b7dbe6a85e59a8e469678315 edf8a18f854dd367d574d3367d6bf3505af5a365b9eb32aa2dd3422ca170eb66
GET /risorse_dt/applicazioni/posteid/immagini/attivare-servizio-ritiro-digitale.png HTTP/1.1
Host: posteid.poste.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://posteid.poste.it/
Cookie: JSESSIONID=PLcCMGom4L+rxhlYc13H34E-.portal5; id-P-N=RM
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 08:22:49 GMT
Content-Type: image/png
Content-Length: 19655
Connection: keep-alive
Server: nginx
Last-Modified: Wed, 17 Apr 2024 16:19:12 GMT
ETag: "661ff680-4cc7"
Expires: Tue, 07 May 2024 09:22:49 GMT
X-Src: NginxRM
Pragma: public
Cache-Control: max-age=3600, public
Accept-Ranges: bytes
|
|
| posteid.poste.it/risorse_dt/condivise/fonts/texta/old/Texta-Regular/Texta-Regular.woff | 4.232.8.16 | 200 OK | 32 kB |
URL GET HTTP/1.1posteid.poste.it/risorse_dt/condivise/fonts/texta/old/Texta-Regular/Texta-Regular.woff IP4.232.8.16:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://posteid.poste.it/ CertificateIssuerGlobalSign nv-sa Subjectposteid.poste.it FingerprintF0:CF:72:CB:03:F6:23:39:79:90:92:AD:FD:A3:CB:D9:B6:83:59:B4 ValidityWed, 12 Apr 2023 10:21:48 GMT - Mon, 13 May 2024 10:21:47 GMT
File typeWeb Open Font Format, TrueType, length 32376, version 1.0 Hash8d611853ca1853f21ea4d768306f965e b189a033f6a69180f2f705557021861ee89af975 4563e60af72ef8d0cc8b7c64716d81610d2f6595c7f76c8069b2015a89d623e2
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Poste Italiane |
GET /risorse_dt/condivise/fonts/texta/old/Texta-Regular/Texta-Regular.woff HTTP/1.1
Host: posteid.poste.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://posteid.poste.it/risorse_dt/condivise/stili/trasversali/fonts.css
Cookie: JSESSIONID=PLcCMGom4L+rxhlYc13H34E-.portal5; id-P-N=RM
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 08:22:49 GMT
Content-Type: font/woff
Content-Length: 32376
Connection: keep-alive
Server: nginx
Last-Modified: Wed, 17 Apr 2024 16:19:04 GMT
ETag: "661ff678-7e78"
Expires: Tue, 07 May 2024 09:22:49 GMT
X-Src: NginxRM
Pragma: public
Cache-Control: max-age=3600, public
Accept-Ranges: bytes
|
|
| posteid.poste.it/risorse_dt/condivise/fonts/texta/old/Texta-Book/Texta-Book.woff | 4.232.8.16 | 200 OK | 32 kB |
URL GET HTTP/1.1posteid.poste.it/risorse_dt/condivise/fonts/texta/old/Texta-Book/Texta-Book.woff IP4.232.8.16:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://posteid.poste.it/ CertificateIssuerGlobalSign nv-sa Subjectposteid.poste.it FingerprintF0:CF:72:CB:03:F6:23:39:79:90:92:AD:FD:A3:CB:D9:B6:83:59:B4 ValidityWed, 12 Apr 2023 10:21:48 GMT - Mon, 13 May 2024 10:21:47 GMT
File typeWeb Open Font Format, TrueType, length 32412, version 1.0 Hashe49b4a99e99a162382c9135468cdff61 6fe7b52d7195d20e9d8ad05d4068dd87ddaeff76 0fa4aee030662ed700dc5cb2e13e52b85fb1254a195d9ab0a1a10d79e645c8f8
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Poste Italiane |
GET /risorse_dt/condivise/fonts/texta/old/Texta-Book/Texta-Book.woff HTTP/1.1
Host: posteid.poste.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://posteid.poste.it/risorse_dt/condivise/stili/trasversali/fonts.css
Cookie: JSESSIONID=PLcCMGom4L+rxhlYc13H34E-.portal5; id-P-N=RM
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 08:22:49 GMT
Content-Type: font/woff
Content-Length: 32412
Connection: keep-alive
Server: nginx
Last-Modified: Wed, 17 Apr 2024 16:19:08 GMT
ETag: "661ff67c-7e9c"
Expires: Tue, 07 May 2024 09:22:49 GMT
X-Src: NginxRM
Pragma: public
Cache-Control: max-age=3600, public
Accept-Ranges: bytes
|
|
| posteid.poste.it/risorse_dt/condivise/fonts/texta/old/Texta-Light/Texta-Light.woff | 4.232.8.16 | 200 OK | 32 kB |
URL GET HTTP/1.1posteid.poste.it/risorse_dt/condivise/fonts/texta/old/Texta-Light/Texta-Light.woff IP4.232.8.16:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://posteid.poste.it/ CertificateIssuerGlobalSign nv-sa Subjectposteid.poste.it FingerprintF0:CF:72:CB:03:F6:23:39:79:90:92:AD:FD:A3:CB:D9:B6:83:59:B4 ValidityWed, 12 Apr 2023 10:21:48 GMT - Mon, 13 May 2024 10:21:47 GMT
File typeWeb Open Font Format, TrueType, length 31976, version 1.0 Hashdcdd69e7910e57b0adc381e0fcf93e3e 21fd668706b3cd97f1b5df0c61ac4b05ab0bdf29 e3e914fafd966522cc6e0db2355a72202ece3052e768b0e34d05bdc4d26bf489
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Poste Italiane |
GET /risorse_dt/condivise/fonts/texta/old/Texta-Light/Texta-Light.woff HTTP/1.1
Host: posteid.poste.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://posteid.poste.it/risorse_dt/condivise/stili/trasversali/fonts.css
Cookie: JSESSIONID=PLcCMGom4L+rxhlYc13H34E-.portal5; id-P-N=RM
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 08:22:49 GMT
Content-Type: font/woff
Content-Length: 31976
Connection: keep-alive
Server: nginx
Last-Modified: Wed, 17 Apr 2024 16:19:06 GMT
ETag: "661ff67a-7ce8"
Expires: Tue, 07 May 2024 09:22:49 GMT
X-Src: NginxRM
Pragma: public
Cache-Control: max-age=3600, public
Accept-Ranges: bytes
|
|
| posteid.poste.it/risorse_dt/condivise/fonts/texta/old/Texta-Medium/Texta-Medium.woff | 4.232.8.16 | 200 OK | 33 kB |
URL GET HTTP/1.1posteid.poste.it/risorse_dt/condivise/fonts/texta/old/Texta-Medium/Texta-Medium.woff IP4.232.8.16:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://posteid.poste.it/ CertificateIssuerGlobalSign nv-sa Subjectposteid.poste.it FingerprintF0:CF:72:CB:03:F6:23:39:79:90:92:AD:FD:A3:CB:D9:B6:83:59:B4 ValidityWed, 12 Apr 2023 10:21:48 GMT - Mon, 13 May 2024 10:21:47 GMT
File typeWeb Open Font Format, TrueType, length 32756, version 1.0 Hashddcb123ab58089ce07fa2d0e767decc4 b6bdcb18d6e6c3a28a40a041324001c794375c85 98a9f23066501d2b1676f72a2feb355caa114d4dffce7bae927083af92ccd6c9
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Poste Italiane |
GET /risorse_dt/condivise/fonts/texta/old/Texta-Medium/Texta-Medium.woff HTTP/1.1
Host: posteid.poste.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://posteid.poste.it/risorse_dt/condivise/stili/trasversali/fonts.css
Cookie: JSESSIONID=PLcCMGom4L+rxhlYc13H34E-.portal5; id-P-N=RM
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 08:22:49 GMT
Content-Type: font/woff
Content-Length: 32756
Connection: keep-alive
Server: nginx
Last-Modified: Wed, 17 Apr 2024 16:19:08 GMT
ETag: "661ff67c-7ff4"
Expires: Tue, 07 May 2024 09:22:49 GMT
X-Src: NginxRM
Pragma: public
Cache-Control: max-age=3600, public
Accept-Ranges: bytes
|
|
| posteid.poste.it/risorse_dt/condivise/immagini/loghi/logo-poste-italiane.png | 4.232.8.16 | 200 OK | 6.2 kB |
URL GET HTTP/1.1posteid.poste.it/risorse_dt/condivise/immagini/loghi/logo-poste-italiane.png IP4.232.8.16:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://posteid.poste.it/ CertificateIssuerGlobalSign nv-sa Subjectposteid.poste.it FingerprintF0:CF:72:CB:03:F6:23:39:79:90:92:AD:FD:A3:CB:D9:B6:83:59:B4 ValidityWed, 12 Apr 2023 10:21:48 GMT - Mon, 13 May 2024 10:21:47 GMT
File typePNG image data, 194 x 25, 8-bit/color RGBA, non-interlaced Hash99ffebe9a3e9a00434679344590600e4 496812738522b36587902625b9ea31c973f95c80 4b76e5a6a06f430c4c3c7a801632cf646f4fac8bbe919ff14938396abb08ae0f
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Poste Italiane |
GET /risorse_dt/condivise/immagini/loghi/logo-poste-italiane.png HTTP/1.1
Host: posteid.poste.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://posteid.poste.it/
Cookie: JSESSIONID=PLcCMGom4L+rxhlYc13H34E-.portal5; id-P-N=RM
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 08:22:49 GMT
Content-Type: image/png
Content-Length: 6189
Connection: keep-alive
Server: nginx
Last-Modified: Wed, 17 Apr 2024 16:18:54 GMT
ETag: "661ff66e-182d"
Expires: Tue, 07 May 2024 09:22:49 GMT
X-Src: NginxRM
Pragma: public
Cache-Control: max-age=3600, public
Accept-Ranges: bytes
|
|
| assets.adobedtm.com/extensions/EPbf7b42aa08bc4f10879b1484195e80d1/AppMeasurement.min.js | 23.38.200.237 | 200 OK | 12 kB |
URL GET HTTP/2assets.adobedtm.com/extensions/EPbf7b42aa08bc4f10879b1484195e80d1/AppMeasurement.min.js IP23.38.200.237:443
Requested byhttps://posteid.poste.it/ CertificateIssuerDigiCert Inc Subjectassets.adobedtm.com Fingerprint8E:2F:9F:94:55:93:C2:B5:58:37:E8:D3:02:3C:23:AF:BA:E7:1D:EA ValidityTue, 11 Jul 2023 00:00:00 GMT - Sat, 10 Aug 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (32717) Hashdfdd9e1f988805f0c2fbb10cd6b8f034 b6cd42821dd2e732919fd053a4665af0e15e0335 d6d01246a30e9d483531c27721f73f266fa4af35effdb21683ac02a620ab8aaf
GET /extensions/EPbf7b42aa08bc4f10879b1484195e80d1/AppMeasurement.min.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://posteid.poste.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "dfdd9e1f988805f0c2fbb10cd6b8f034:1663863409.614694"
last-modified: Thu, 22 Sep 2022 16:16:49 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
content-length: 12384
expires: Tue, 07 May 2024 09:22:49 GMT
date: Tue, 07 May 2024 08:22:49 GMT
cache-control: no-cache
access-control-allow-origin: https://posteid.poste.it
timing-allow-origin: *
X-Firefox-Spdy: h2
|
|
| assets.adobedtm.com/extensions/EPbf7b42aa08bc4f10879b1484195e80d1/AppMeasurement_Module_ActivityMap.min.js | 23.38.200.237 | 200 OK | 1.6 kB |
URL GET HTTP/2assets.adobedtm.com/extensions/EPbf7b42aa08bc4f10879b1484195e80d1/AppMeasurement_Module_ActivityMap.min.js IP23.38.200.237:443
Requested byhttps://posteid.poste.it/ CertificateIssuerDigiCert Inc Subjectassets.adobedtm.com Fingerprint8E:2F:9F:94:55:93:C2:B5:58:37:E8:D3:02:3C:23:AF:BA:E7:1D:EA ValidityTue, 11 Jul 2023 00:00:00 GMT - Sat, 10 Aug 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (3138) Hashb89fcb8870ac40eecb6d3cc844d35389 1bbde1a85912bdeff9c9cf55bf2fb3969d245874 78c1c1baf0d964522f8afab09cfc754685c1648826a7f9967fd52b774b4ec5aa
GET /extensions/EPbf7b42aa08bc4f10879b1484195e80d1/AppMeasurement_Module_ActivityMap.min.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://posteid.poste.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "b89fcb8870ac40eecb6d3cc844d35389:1663863409.92483"
last-modified: Thu, 22 Sep 2022 16:16:49 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
expires: Tue, 07 May 2024 09:22:49 GMT
date: Tue, 07 May 2024 08:22:49 GMT
content-length: 1598
cache-control: no-cache
access-control-allow-origin: https://posteid.poste.it
timing-allow-origin: *
X-Firefox-Spdy: h2
|
|
| posteid.poste.it/risorse_dt/condivise/immagini/generiche/spinner_giallo.gif | 4.232.8.16 | 200 OK | 34 kB |
URL GET HTTP/1.1posteid.poste.it/risorse_dt/condivise/immagini/generiche/spinner_giallo.gif IP4.232.8.16:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://posteid.poste.it/ CertificateIssuerGlobalSign nv-sa Subjectposteid.poste.it FingerprintF0:CF:72:CB:03:F6:23:39:79:90:92:AD:FD:A3:CB:D9:B6:83:59:B4 ValidityWed, 12 Apr 2023 10:21:48 GMT - Mon, 13 May 2024 10:21:47 GMT
File typeGIF image data, version 89a, 150 x 150 Hash442d51dab3205cf4c81de67e4bafdbda 52726f8f87116bd1fd03e9d99c0bb22afd168937 ea638c8244c7a5cc50e617807b1fc35637430f976e8210ef3d560a5eb059e5f5
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Poste Italiane |
GET /risorse_dt/condivise/immagini/generiche/spinner_giallo.gif HTTP/1.1
Host: posteid.poste.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://posteid.poste.it/
Cookie: JSESSIONID=PLcCMGom4L+rxhlYc13H34E-.portal5; id-P-N=RM
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 08:22:49 GMT
Content-Type: image/gif
Content-Length: 33869
Connection: keep-alive
Server: nginx
Last-Modified: Wed, 17 Apr 2024 16:18:54 GMT
ETag: "661ff66e-844d"
Expires: Tue, 07 May 2024 09:22:49 GMT
X-Src: NginxRM
Pragma: public
Cache-Control: max-age=3600, public
Accept-Ranges: bytes
|
|
| posteid.poste.it/favicon.ico | 4.232.8.16 | 200 OK | 15 kB |
URL GET HTTP/1.1posteid.poste.it/favicon.ico IP4.232.8.16:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://posteid.poste.it/ CertificateIssuerGlobalSign nv-sa Subjectposteid.poste.it FingerprintF0:CF:72:CB:03:F6:23:39:79:90:92:AD:FD:A3:CB:D9:B6:83:59:B4 ValidityWed, 12 Apr 2023 10:21:48 GMT - Mon, 13 May 2024 10:21:47 GMT
File typeMS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel Hash3cbac548d46ec7b7794ec1d1ba11ff08 08d22a6ce2b0afa7c06778b973eb69c620c1573f 2214e7a95531eb6d2adbfedb90e1f978dee39535d69eeef3de4f6dee36184dee
GET /favicon.ico HTTP/1.1
Host: posteid.poste.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://posteid.poste.it/
Cookie: JSESSIONID=PLcCMGom4L+rxhlYc13H34E-.portal5; id-P-N=RM; AMCV_3A3C1D085C5C70990A495CFC%40AdobeOrg=179643557%7CMCIDTS%7C19851%7CvVersion%7C5.5.0; _cs_mk_aa=0.08367056626600755_1715070169344
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 May 2024 08:22:49 GMT
Content-Type: image/x-icon
Content-Length: 15086
Connection: keep-alive
Server: nginx
Vary: X-Forwarded-For
Last-Modified: Thu, 22 Mar 2018 13:50:22 GMT
ETag: "3aee-5680096bfe380"
Accept-Ranges: bytes
X-Frame-Options: SAMEORIGIN
Set-Cookie: id-P-N=RM;Path=/;Max-Age=3600
|
|
| assets.adobedtm.com/4d622ce80bd2/66013fe91d66/14b081d03946/RCce78d2ba79364101b982bf481cca240c-source.min.js | 23.38.200.237 | 200 OK | 1.1 kB |
URL GET HTTP/2assets.adobedtm.com/4d622ce80bd2/66013fe91d66/14b081d03946/RCce78d2ba79364101b982bf481cca240c-source.min.js IP23.38.200.237:443
Requested byhttps://posteid.poste.it/ CertificateIssuerDigiCert Inc Subjectassets.adobedtm.com Fingerprint8E:2F:9F:94:55:93:C2:B5:58:37:E8:D3:02:3C:23:AF:BA:E7:1D:EA ValidityTue, 11 Jul 2023 00:00:00 GMT - Sat, 10 Aug 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (3366) Hash7ef90ed67231bea2315203b64e6f1834 7d109e71503ee521682172df64c7324483ec4955 2cd9b302e4213cb547b24cb376ed23dffbe3cd55f4125f80ab55ec0e97883676
GET /4d622ce80bd2/66013fe91d66/14b081d03946/RCce78d2ba79364101b982bf481cca240c-source.min.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://posteid.poste.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "fb88894130a59523208f1e58e2018cca:1715068662.232849"
last-modified: Tue, 07 May 2024 07:57:42 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
content-length: 1104
cache-control: max-age=3600
expires: Tue, 07 May 2024 09:22:49 GMT
date: Tue, 07 May 2024 08:22:49 GMT
access-control-allow-origin: https://posteid.poste.it
timing-allow-origin: *
X-Firefox-Spdy: h2
|
|
| assets.adobedtm.com/4d622ce80bd2/66013fe91d66/14b081d03946/RC5e6ff8187feb49d4817d6dce579f2e15-source.min.js | 23.38.200.237 | 200 OK | 1.3 kB |
URL GET HTTP/2assets.adobedtm.com/4d622ce80bd2/66013fe91d66/14b081d03946/RC5e6ff8187feb49d4817d6dce579f2e15-source.min.js IP23.38.200.237:443
Requested byhttps://posteid.poste.it/ CertificateIssuerDigiCert Inc Subjectassets.adobedtm.com Fingerprint8E:2F:9F:94:55:93:C2:B5:58:37:E8:D3:02:3C:23:AF:BA:E7:1D:EA ValidityTue, 11 Jul 2023 00:00:00 GMT - Sat, 10 Aug 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (3094) Hash9656e71f1125af2ee5983ed0558189c0 24f22f59fd8cf66fd62fee05e9aae8deceddd54c f799c5daff7a1723cd572c267b72a22751460ed1ed48b9aecb4daa6ed0a0e38c
GET /4d622ce80bd2/66013fe91d66/14b081d03946/RC5e6ff8187feb49d4817d6dce579f2e15-source.min.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://posteid.poste.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "fb88894130a59523208f1e58e2018cca:1715068662.232849"
last-modified: Tue, 07 May 2024 07:57:42 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
content-length: 1264
cache-control: max-age=3600
expires: Tue, 07 May 2024 09:22:49 GMT
date: Tue, 07 May 2024 08:22:49 GMT
access-control-allow-origin: https://posteid.poste.it
timing-allow-origin: *
X-Firefox-Spdy: h2
|
|
| assets.adobedtm.com/4d622ce80bd2/66013fe91d66/14b081d03946/RCac0d5838bbeb4039951c23a60274fc69-source.min.js | 23.38.200.237 | 200 OK | 1.1 kB |
URL GET HTTP/2assets.adobedtm.com/4d622ce80bd2/66013fe91d66/14b081d03946/RCac0d5838bbeb4039951c23a60274fc69-source.min.js IP23.38.200.237:443
Requested byhttps://posteid.poste.it/ CertificateIssuerDigiCert Inc Subjectassets.adobedtm.com Fingerprint8E:2F:9F:94:55:93:C2:B5:58:37:E8:D3:02:3C:23:AF:BA:E7:1D:EA ValidityTue, 11 Jul 2023 00:00:00 GMT - Sat, 10 Aug 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (3225) Hash62b5e4fa922495667d567035e67a3089 8e2e167f9319f112f00335d730a871ae5d91b0d2 8fa5806998acd56d25ae7fc942579ee9b2e816587f5c39e634b62e61e6691482
GET /4d622ce80bd2/66013fe91d66/14b081d03946/RCac0d5838bbeb4039951c23a60274fc69-source.min.js HTTP/1.1
Host: assets.adobedtm.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://posteid.poste.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: application/x-javascript
etag: "fb88894130a59523208f1e58e2018cca:1715068662.232849"
last-modified: Tue, 07 May 2024 07:57:42 GMT
server: AkamaiNetStorage
vary: Accept-Encoding
content-encoding: gzip
content-length: 1069
cache-control: max-age=3600
expires: Tue, 07 May 2024 09:22:49 GMT
date: Tue, 07 May 2024 08:22:49 GMT
access-control-allow-origin: https://posteid.poste.it
timing-allow-origin: *
X-Firefox-Spdy: h2
|
|
| widget.poste.it/js/custom.js |  13.107.213.43 | 200 OK | 35 kB |
URL GET HTTP/2widget.poste.it/js/custom.js IP13.107.213.43:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://posteid.poste.it/ CertificateIssuerGlobalSign nv-sa Subjectwidget.poste.it Fingerprint00:4D:DA:09:4E:51:1B:F9:BA:05:88:18:B0:D5:E0:D1:58:2D:D4:41 ValidityMon, 19 Jun 2023 09:46:44 GMT - Sat, 20 Jul 2024 09:46:43 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (369) Hashbae2b346c8b003b394af31e830228e45 55d8fa9d79a8f5849dc243325a8291bbfd3241b8 812c77509c854f0f4d58cecb1fb26168ceeebe504aea39f6cf559598f8ce6ec4
GET /js/custom.js HTTP/1.1
Host: widget.poste.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://posteid.poste.it/
Cookie: AMCV_3A3C1D085C5C70990A495CFC%40AdobeOrg=179643557%7CMCIDTS%7C19851%7CMCMID%7C03496193758210560586737622738975734193%7CMCAID%7CNONE%7CMCOPTOUT-1715077369s%7CNONE%7CvVersion%7C5.5.0; _cs_mk_aa=0.08367056626600755_1715070169344; AMCVS_3A3C1D085C5C70990A495CFC%40AdobeOrg=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 07 May 2024 08:22:49 GMT
content-type: application/javascript
content-length: 34732
access-control-allow-headers: Cache-Control,Pragma, Access-Control-Allow-Headers, Origin,Accept, X-Requested-With, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers, If-Modified-Since, X-WRKEY, apikey
last-modified: Tue, 02 Apr 2024 09:34:13 GMT
etag: "87ac-61519cf2344cf"
access-control-allow-origin:
x-azure-ref: 20240507T082249Z-er15bb998b7cbbjrva4gc3ezws00000002dg00000000dqyw
x-cache: CONFIG_NOCACHE
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| widget.poste.it/json/widgetLabels.json | 13.107.213.43 | 200 OK | 7.1 kB |
URL POST HTTP/2widget.poste.it/json/widgetLabels.json IP13.107.213.43:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://posteid.poste.it/ CertificateIssuerGlobalSign nv-sa Subjectwidget.poste.it Fingerprint00:4D:DA:09:4E:51:1B:F9:BA:05:88:18:B0:D5:E0:D1:58:2D:D4:41 ValidityMon, 19 Jun 2023 09:46:44 GMT - Sat, 20 Jul 2024 09:46:43 GMT
Hashf6bcc872c62240d4339b14acdb952341 2a14c8c5c5513ba23351a67ae1a6f23f95626a23 5dee78278049e1a73e771b2ea7b4d3cbf89f71a2e6c535e07e45ff392cb89fa4
POST /json/widgetLabels.json HTTP/1.1
Host: widget.poste.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://posteid.poste.it
DNT: 1
Connection: keep-alive
Referer: https://posteid.poste.it/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
Content-Length: 0
HTTP/2 200 OK
date: Tue, 07 May 2024 08:22:50 GMT
content-type: application/json
content-length: 7125
access-control-allow-headers: Cache-Control,Pragma, Access-Control-Allow-Headers, Origin,Accept, X-Requested-With, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers, If-Modified-Since, X-WRKEY, apikey
last-modified: Tue, 02 Apr 2024 09:33:25 GMT
etag: "1bd5-61519cc43ce9f"
access-control-allow-origin: https://posteid.poste.it
x-azure-ref: 20240507T082250Z-er15bb998b7scx4tye3he4f70n00000002cg000000009bs8
x-cache: CONFIG_NOCACHE
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| api.ipify.org/ |  104.26.13.205 | 200 OK | 12 B |
IP104.26.13.205:443
Requested byhttps://posteid.poste.it/ CertificateIssuerGoogle Trust Services LLC Subjectipify.org FingerprintC8:1A:05:47:C5:73:C6:CE:DF:1D:A6:DE:00:11:A9:9A:8C:DB:EF:A7 ValidityThu, 21 Mar 2024 19:56:02 GMT - Wed, 19 Jun 2024 19:56:01 GMT
File typeASCII text, with no line terminators Hash35b0bce9d250429df012c0426f88d0bd f81d80af9cbeb0011316fbba3da8002b32251f7a da9add592d7eb9cca7705cb4870d7fd4e9718ccd51486c4261a727a8d566960d
GET / HTTP/1.1
Host: api.ipify.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://posteid.poste.it
DNT: 1
Connection: keep-alive
Referer: https://posteid.poste.it/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 07 May 2024 08:22:50 GMT
content-type: text/plain
content-length: 12
access-control-allow-origin: *
vary: Origin
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 87ffcdf48ec21c02-OSL
X-Firefox-Spdy: h2
|
|
| widget.poste.it/fonts/Texta-Black.woff | 13.107.213.43 | 200 OK | 33 kB |
URL POST HTTP/2widget.poste.it/fonts/Texta-Black.woff IP13.107.213.43:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://posteid.poste.it/ CertificateIssuerGlobalSign nv-sa Subjectwidget.poste.it Fingerprint00:4D:DA:09:4E:51:1B:F9:BA:05:88:18:B0:D5:E0:D1:58:2D:D4:41 ValidityMon, 19 Jun 2023 09:46:44 GMT - Sat, 20 Jul 2024 09:46:43 GMT
File typeWeb Open Font Format, TrueType, length 33140, version 1.0 Hashbb38c2004fb8284b41ab208428f57e57 eede479ce3535e6dd33934e677de0b7224ce31c4 3d4a9402bef6028217f3f4279e7f6c4bb9af9bfce7786eac52d3a5d0065a27af
POST /fonts/Texta-Black.woff HTTP/1.1
Host: widget.poste.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://posteid.poste.it
DNT: 1
Connection: keep-alive
Referer: https://posteid.poste.it/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
Content-Length: 0
TE: trailers
HTTP/2 200 OK
date: Tue, 07 May 2024 08:22:50 GMT
content-type: application/font-woff
content-length: 33140
access-control-allow-headers: Cache-Control,Pragma, Access-Control-Allow-Headers, Origin,Accept, X-Requested-With, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers, If-Modified-Since, X-WRKEY, apikey
last-modified: Tue, 02 Apr 2024 09:34:13 GMT
etag: "8174-61519cf22db57"
access-control-allow-origin: https://posteid.poste.it
x-azure-ref: 20240507T082250Z-er15bb998b7scx4tye3he4f70n00000002cg000000009bt8
x-cache: CONFIG_NOCACHE
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| widget.poste.it/fonts/Texta-LightItalic.woff | 13.107.213.43 | 200 OK | 32 kB |
URL POST HTTP/2widget.poste.it/fonts/Texta-LightItalic.woff IP13.107.213.43:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://posteid.poste.it/ CertificateIssuerGlobalSign nv-sa Subjectwidget.poste.it Fingerprint00:4D:DA:09:4E:51:1B:F9:BA:05:88:18:B0:D5:E0:D1:58:2D:D4:41 ValidityMon, 19 Jun 2023 09:46:44 GMT - Sat, 20 Jul 2024 09:46:43 GMT
File typeWeb Open Font Format, TrueType, length 32084, version 1.0 Hash50ff911beaeaea06a186cbe72898ea42 610aa069b2987d6fbbf46c456f177ced1aa49a57 91509bd0e2ed20655b4cbbf585f5587a1a1cc282291dd56d7821881699757971
POST /fonts/Texta-LightItalic.woff HTTP/1.1
Host: widget.poste.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://posteid.poste.it
DNT: 1
Connection: keep-alive
Referer: https://posteid.poste.it/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
Content-Length: 0
TE: trailers
HTTP/2 200 OK
date: Tue, 07 May 2024 08:22:50 GMT
content-type: application/font-woff
content-length: 32084
access-control-allow-headers: Cache-Control,Pragma, Access-Control-Allow-Headers, Origin,Accept, X-Requested-With, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers, If-Modified-Since, X-WRKEY, apikey
last-modified: Tue, 02 Apr 2024 09:34:13 GMT
etag: "7d54-61519cf22d76f"
access-control-allow-origin: https://posteid.poste.it
x-azure-ref: 20240507T082250Z-er15bb998b7scx4tye3he4f70n00000002cg000000009bte
x-cache: CONFIG_NOCACHE
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| widget.poste.it/fonts/Texta-Regular.woff | 13.107.213.43 | 200 OK | 32 kB |
URL POST HTTP/2widget.poste.it/fonts/Texta-Regular.woff IP13.107.213.43:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://posteid.poste.it/ CertificateIssuerGlobalSign nv-sa Subjectwidget.poste.it Fingerprint00:4D:DA:09:4E:51:1B:F9:BA:05:88:18:B0:D5:E0:D1:58:2D:D4:41 ValidityMon, 19 Jun 2023 09:46:44 GMT - Sat, 20 Jul 2024 09:46:43 GMT
File typeWeb Open Font Format, TrueType, length 32376, version 1.0 Hash8d611853ca1853f21ea4d768306f965e b189a033f6a69180f2f705557021861ee89af975 4563e60af72ef8d0cc8b7c64716d81610d2f6595c7f76c8069b2015a89d623e2
POST /fonts/Texta-Regular.woff HTTP/1.1
Host: widget.poste.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://posteid.poste.it
DNT: 1
Connection: keep-alive
Referer: https://posteid.poste.it/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
Content-Length: 0
TE: trailers
HTTP/2 200 OK
date: Tue, 07 May 2024 08:22:50 GMT
content-type: application/font-woff
content-length: 32376
access-control-allow-headers: Cache-Control,Pragma, Access-Control-Allow-Headers, Origin,Accept, X-Requested-With, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers, If-Modified-Since, X-WRKEY, apikey
last-modified: Tue, 02 Apr 2024 09:33:25 GMT
etag: "7e78-61519cc4349ca"
access-control-allow-origin: https://posteid.poste.it
x-azure-ref: 20240507T082250Z-er15bb998b7scx4tye3he4f70n00000002cg000000009btm
x-cache: CONFIG_NOCACHE
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| widget.poste.it/css/chat_custom.css | 13.107.213.43 | 200 OK | 1.8 kB |
URL GET HTTP/2widget.poste.it/css/chat_custom.css IP13.107.213.43:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://posteid.poste.it/ CertificateIssuerGlobalSign nv-sa Subjectwidget.poste.it Fingerprint00:4D:DA:09:4E:51:1B:F9:BA:05:88:18:B0:D5:E0:D1:58:2D:D4:41 ValidityMon, 19 Jun 2023 09:46:44 GMT - Sat, 20 Jul 2024 09:46:43 GMT
File typeASCII text, with CRLF line terminators Hashbc1ba2f66a7cba31826fcb54ceb87fdd b875fa922454cbc10b12cddcba905aaee998e3a6 00a0d86e772f0005a19f1e875852aaafec997f327cbd23938d39c8b34b72af64
GET /css/chat_custom.css HTTP/1.1
Host: widget.poste.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://posteid.poste.it/
Cookie: AMCV_3A3C1D085C5C70990A495CFC%40AdobeOrg=179643557%7CMCIDTS%7C19851%7CMCMID%7C03496193758210560586737622738975734193%7CMCAID%7CNONE%7CMCOPTOUT-1715077369s%7CNONE%7CvVersion%7C5.5.0; _cs_mk_aa=0.08367056626600755_1715070169344; AMCVS_3A3C1D085C5C70990A495CFC%40AdobeOrg=1; s_cc=true
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 07 May 2024 08:22:51 GMT
content-type: text/css
content-length: 1827
access-control-allow-headers: Cache-Control,Pragma, Access-Control-Allow-Headers, Origin,Accept, X-Requested-With, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers, If-Modified-Since, X-WRKEY, apikey
last-modified: Tue, 02 Apr 2024 09:33:25 GMT
etag: "723-61519cc433642"
access-control-allow-origin:
x-azure-ref: 20240507T082250Z-er15bb998b7cbbjrva4gc3ezws00000002dg00000000dr0m
x-cache: CONFIG_NOCACHE
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| widget.poste.it/css/chat_common.css | 13.107.213.43 | 200 OK | 12 kB |
URL GET HTTP/2widget.poste.it/css/chat_common.css IP13.107.213.43:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://posteid.poste.it/ CertificateIssuerGlobalSign nv-sa Subjectwidget.poste.it Fingerprint00:4D:DA:09:4E:51:1B:F9:BA:05:88:18:B0:D5:E0:D1:58:2D:D4:41 ValidityMon, 19 Jun 2023 09:46:44 GMT - Sat, 20 Jul 2024 09:46:43 GMT
File typeASCII text, with CRLF line terminators Hash1e42c0046b692621b04c829e825bd27e da2a8e018084d0f856524c33c8e267b596354548 eb499f5d73cd7f065b0f737e49c81e9809bf604bc50aade999a2c43a79ac3f55
GET /css/chat_common.css HTTP/1.1
Host: widget.poste.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://posteid.poste.it/
Cookie: AMCV_3A3C1D085C5C70990A495CFC%40AdobeOrg=179643557%7CMCIDTS%7C19851%7CMCMID%7C03496193758210560586737622738975734193%7CMCAID%7CNONE%7CMCOPTOUT-1715077369s%7CNONE%7CvVersion%7C5.5.0; _cs_mk_aa=0.08367056626600755_1715070169344; AMCVS_3A3C1D085C5C70990A495CFC%40AdobeOrg=1; s_cc=true
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 07 May 2024 08:22:51 GMT
content-type: text/css
content-length: 11716
access-control-allow-headers: Cache-Control,Pragma, Access-Control-Allow-Headers, Origin,Accept, X-Requested-With, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers, If-Modified-Since, X-WRKEY, apikey
last-modified: Tue, 02 Apr 2024 09:34:13 GMT
etag: "2dc4-61519cf22cbb7"
access-control-allow-origin:
x-azure-ref: 20240507T082250Z-er15bb998b7cbbjrva4gc3ezws00000002dg00000000dr0n
x-cache: CONFIG_NOCACHE
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| widget.poste.it/css/widgets.min.css | 13.107.213.43 | 200 OK | 118 kB |
URL GET HTTP/2widget.poste.it/css/widgets.min.css IP13.107.213.43:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://posteid.poste.it/ CertificateIssuerGlobalSign nv-sa Subjectwidget.poste.it Fingerprint00:4D:DA:09:4E:51:1B:F9:BA:05:88:18:B0:D5:E0:D1:58:2D:D4:41 ValidityMon, 19 Jun 2023 09:46:44 GMT - Sat, 20 Jul 2024 09:46:43 GMT
File typeASCII text, with very long lines (64898), with CRLF line terminators Size118 kB (118490 bytes) Hash8a02a55585ef2630988a32645ce68be2 00d11de0e5150cf3d35629f2bc52af00bfce4ee0 f0cf34169482d5d1aa31c2910fea9ad33979b7bf52a1202ab83d3de29843d8a3
GET /css/widgets.min.css HTTP/1.1
Host: widget.poste.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://posteid.poste.it/
Cookie: AMCV_3A3C1D085C5C70990A495CFC%40AdobeOrg=179643557%7CMCIDTS%7C19851%7CMCMID%7C03496193758210560586737622738975734193%7CMCAID%7CNONE%7CMCOPTOUT-1715077369s%7CNONE%7CvVersion%7C5.5.0; _cs_mk_aa=0.08367056626600755_1715070169344; AMCVS_3A3C1D085C5C70990A495CFC%40AdobeOrg=1; s_cc=true
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 07 May 2024 08:22:51 GMT
content-type: text/css
content-length: 118490
access-control-allow-headers: Cache-Control,Pragma, Access-Control-Allow-Headers, Origin,Accept, X-Requested-With, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers, If-Modified-Since, X-WRKEY, apikey
last-modified: Tue, 02 Apr 2024 09:33:25 GMT
etag: "1ceda-61519cc433642"
access-control-allow-origin:
x-azure-ref: 20240507T082250Z-er15bb998b7cbbjrva4gc3ezws00000002dg00000000dr0p
x-cache: CONFIG_NOCACHE
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| widget.poste.it/js/lib/widgets.min.js | 13.107.213.43 | 200 OK | 839 kB |
URL GET HTTP/2widget.poste.it/js/lib/widgets.min.js IP13.107.213.43:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://posteid.poste.it/ CertificateIssuerGlobalSign nv-sa Subjectwidget.poste.it Fingerprint00:4D:DA:09:4E:51:1B:F9:BA:05:88:18:B0:D5:E0:D1:58:2D:D4:41 ValidityMon, 19 Jun 2023 09:46:44 GMT - Sat, 20 Jul 2024 09:46:43 GMT
File typeJavaScript source, ASCII text, with very long lines (64898), with CRLF line terminators Size839 kB (839332 bytes) Hash82374b6c20855319bda55472e83e82b4 9067439be48ff638c5ff5ef790ce12bc08b21414 18fc4c844d845b1c289d1d1d324ff6e7abf51785619c9a60d9e245b2100c256a
GET /js/lib/widgets.min.js HTTP/1.1
Host: widget.poste.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://posteid.poste.it/
Cookie: AMCV_3A3C1D085C5C70990A495CFC%40AdobeOrg=179643557%7CMCIDTS%7C19851%7CMCMID%7C03496193758210560586737622738975734193%7CMCAID%7CNONE%7CMCOPTOUT-1715077369s%7CNONE%7CvVersion%7C5.5.0; _cs_mk_aa=0.08367056626600755_1715070169344; AMCVS_3A3C1D085C5C70990A495CFC%40AdobeOrg=1; s_cc=true
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 07 May 2024 08:22:50 GMT
content-type: application/javascript
content-length: 839332
access-control-allow-headers: Cache-Control,Pragma, Access-Control-Allow-Headers, Origin,Accept, X-Requested-With, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers, If-Modified-Since, X-WRKEY, apikey
last-modified: Tue, 02 Apr 2024 09:33:25 GMT
etag: "ccea4-61519cc43c6cf"
access-control-allow-origin:
x-azure-ref: 20240507T082250Z-er15bb998b7cbbjrva4gc3ezws00000002dg00000000dr0k
x-cache: CONFIG_NOCACHE
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| widget.poste.it/img/button_openChat.png | 13.107.213.43 | 200 OK | 20 kB |
URL GET HTTP/2widget.poste.it/img/button_openChat.png IP13.107.213.43:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://posteid.poste.it/ CertificateIssuerGlobalSign nv-sa Subjectwidget.poste.it Fingerprint00:4D:DA:09:4E:51:1B:F9:BA:05:88:18:B0:D5:E0:D1:58:2D:D4:41 ValidityMon, 19 Jun 2023 09:46:44 GMT - Sat, 20 Jul 2024 09:46:43 GMT
File typePNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced Hash7305cd2f12691ddda291fb1b21bd4347 5b3f944fc435c3ad74f138942aaf50ff159cbee0 25fbb9e5014408868cbd5d87ac48192ddddcb3b32ca3cdfb8e3efa0ebba2e251
GET /img/button_openChat.png HTTP/1.1
Host: widget.poste.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://widget.poste.it/css/chat_custom.css
Cookie: AMCV_3A3C1D085C5C70990A495CFC%40AdobeOrg=179643557%7CMCIDTS%7C19851%7CMCMID%7C03496193758210560586737622738975734193%7CMCAID%7CNONE%7CMCOPTOUT-1715077369s%7CNONE%7CvVersion%7C5.5.0; _cs_mk_aa=0.08367056626600755_1715070169344; AMCVS_3A3C1D085C5C70990A495CFC%40AdobeOrg=1; s_cc=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 07 May 2024 08:22:51 GMT
content-type: image/png
content-length: 20107
access-control-allow-headers: Cache-Control,Pragma, Access-Control-Allow-Headers, Origin,Accept, X-Requested-With, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers, If-Modified-Since, X-WRKEY, apikey
last-modified: Tue, 02 Apr 2024 09:34:13 GMT
etag: "4e8b-61519cf22eedf"
access-control-allow-origin:
x-azure-ref: 20240507T082251Z-er15bb998b7cbbjrva4gc3ezws00000002dg00000000dr1r
x-cache: CONFIG_NOCACHE
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| widget.poste.it/fonts/Texta-Regular.woff | 13.107.213.43 | 200 OK | 32 kB |
URL POST HTTP/2widget.poste.it/fonts/Texta-Regular.woff IP13.107.213.43:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
Requested byhttps://posteid.poste.it/ CertificateIssuerGlobalSign nv-sa Subjectwidget.poste.it Fingerprint00:4D:DA:09:4E:51:1B:F9:BA:05:88:18:B0:D5:E0:D1:58:2D:D4:41 ValidityMon, 19 Jun 2023 09:46:44 GMT - Sat, 20 Jul 2024 09:46:43 GMT
File typeWeb Open Font Format, TrueType, length 32376, version 1.0 Hash8d611853ca1853f21ea4d768306f965e b189a033f6a69180f2f705557021861ee89af975 4563e60af72ef8d0cc8b7c64716d81610d2f6595c7f76c8069b2015a89d623e2
GET /fonts/Texta-Regular.woff HTTP/1.1
Host: widget.poste.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://posteid.poste.it
DNT: 1
Connection: keep-alive
Referer: https://widget.poste.it/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 07 May 2024 08:22:51 GMT
content-type: application/font-woff
content-length: 32376
access-control-allow-headers: Cache-Control,Pragma, Access-Control-Allow-Headers, Origin,Accept, X-Requested-With, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers, If-Modified-Since, X-WRKEY, apikey
last-modified: Tue, 02 Apr 2024 09:34:13 GMT
etag: "7e78-61519cf22e327"
access-control-allow-origin: https://posteid.poste.it
x-azure-ref: 20240507T082251Z-er15bb998b7scx4tye3he4f70n00000002cg000000009bwg
x-cache: CONFIG_NOCACHE
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|