| firefox.settings.services.mozilla.com/v1/ |  143.204.55.27 | 200 OK | 939 B |
URL HTTP/1.1firefox.settings.services.mozilla.com/v1/ IP143.204.55.27:0
File typeJSON data\012- , ASCII text, with very long lines (939), with no line terminators Hash91dd975a7b17b2922dd23c0e49314e40 57a2ece1e3cee7c4ebf927f2ba92f52cac395fe2 09966873bbf317f8910c59544cfde2a6d46e8acd2905797cc7c85c6b4d18ea8a
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length, Content-Type, Alert, Backoff, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Mon, 12 Sep 2022 05:08:10 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 80d21802b1b80c40e55ccf83433b8eac.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: Vwn6B50DwfiWwc5fCJyuPNkzBohlynnVAWoxi7McI39W25AlgK9WgQ==
Age: 1121
|
|
| r3.o.lencr.org/ |  95.101.11.115 | 200 OK | 503 B |
IP95.101.11.115:0 ASN#20940 Akamai International B.V.
Hash76d5eb597558e3dee0d99719d17e71e0 f3a0f3932fa8059f27dc9422d523b938fa9a7d09 d16de6cc9eb0e1297f53dc1137bb764bf5c21a7727be32ad05afebd1fe9501ed
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D16DE6CC9EB0E1297F53DC1137BB764BF5C21A7727BE32AD05AFEBD1FE9501ED"
Last-Modified: Sat, 10 Sep 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17708
Expires: Mon, 12 Sep 2022 10:21:59 GMT
Date: Mon, 12 Sep 2022 05:26:51 GMT
Connection: keep-alive
|
|
| content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain | 143.204.55.49 | 200 OK | 5.3 kB |
URL HTTP/2content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain IP143.204.55.49:0
File typePEM certificate\012- , ASCII text Hash742edb4038f38bc533514982f3d2e861 cc3a20c8dc2a8c632ef9387a2744253f1e3fdef1 b6bfa49d3d135035701231db2fffc0c0643444394009a94c6a1b4d829d6b8345
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 20 Aug 2022 23:18:05 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Sun, 11 Sep 2022 07:17:13 GMT
etag: "742edb4038f38bc533514982f3d2e861"
x-cache: Hit from cloudfront
via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: tuLCP0OGQPsi1FcdvFyv3RUaJbO_LhAw_ZSoRaYqw0EcudKPNkJaqQ==
age: 79779
X-Firefox-Spdy: h2
|
|
| contile.services.mozilla.com/v1/tiles | 34.117.237.239 | 200 OK | 12 B |
URL HTTP/2contile.services.mozilla.com/v1/tiles IP34.117.237.239:0
File typeJSON data\012- , ASCII text, with no line terminators Hash23e88fb7b99543fb33315b29b1fad9d6 a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 12 Sep 2022 05:26:51 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US | 143.204.55.27 | 200 OK | 329 B |
URL HTTP/1.1firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US IP143.204.55.27:0
File typeJSON data\012- , ASCII text, with very long lines (329), with no line terminators Hash0333b0655111aa68de771adfcc4db243 63f295a144ac87a7c8e23417626724eeca68a7eb 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Mon, 12 Sep 2022 04:56:07 GMT
Cache-Control: max-age=3600
Expires: Mon, 12 Sep 2022 05:41:59 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 814e8c24454087e83cd261a6cf477166.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 3bS_vZzzjJLUnhJElSgoExLcAsQd4vuLZf8FToaTpxqXgZKMf3VHTw==
Age: 1845
|
|
| ocsp.digicert.com/ |  93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hash26e829ba5f754918e20cbd316dc4348e ba198501da0812dd11ca3b38a51325b5de6cfa60 4352c25d4af7637a8435b0df6d042fc606d37a348e966b99fecce8a853b8ebc0
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6001
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 12 Sep 2022 05:26:52 GMT
Last-Modified: Mon, 12 Sep 2022 03:46:51 GMT
Server: ECS (ska/F711)
X-Cache: HIT
Content-Length: 471
|
|
| push.services.mozilla.com/ | 35.162.203.49 | 101 Switching Protocols | 0 B |
URL HTTP/1.1push.services.mozilla.com/ IP35.162.203.49:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: sePvHuKgbutTmL/OTvI+aw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 3qUPkQwuqwXMUfnvBvDo+Ds/vu0=
|
|
| sensitivasarah.it/quam-quo/documents.zip |  86.107.32.80 | 301 Moved Permanently | 0 B |
URL HTTP/1.1sensitivasarah.it/quam-quo/documents.zip IP86.107.32.80:0 ASN#52030 Server Plan S.r.l.
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /quam-quo/documents.zip HTTP/1.1
Host: sensitivasarah.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Mon, 12 Sep 2022 05:26:51 GMT
Server: Apache
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
X-Redirect-By: WordPress
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Location: https://sensitivasarah.it/quam-quo/documents.zip
Content-Length: 0
Keep-Alive: timeout=1, max=100
Content-Type: text/html; charset=UTF-8
|
|
| r3.o.lencr.org/ | 95.101.11.115 | 200 OK | 503 B |
IP95.101.11.115:0 ASN#20940 Akamai International B.V.
Hashdbe51377dbf01b0dd6e47374c0e2b3b7 4ad40780ee2c71833ed788f51664f0529e0dddf4 ba22c55d81f8e227352456be71f2ea03759924766a301565987ca7358968514d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BA22C55D81F8E227352456BE71F2EA03759924766A301565987CA7358968514D"
Last-Modified: Mon, 12 Sep 2022 01:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21594
Expires: Mon, 12 Sep 2022 11:26:46 GMT
Date: Mon, 12 Sep 2022 05:26:52 GMT
Connection: keep-alive
|
|
| sensitivasarah.it/quam-quo/documents.zip | 86.107.32.80 | 301 Moved Permanently | 0 B |
URL HTTP/2sensitivasarah.it/quam-quo/documents.zip IP86.107.32.80:0 ASN#52030 Server Plan S.r.l.
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /quam-quo/documents.zip HTTP/1.1
Host: sensitivasarah.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 301 Moved Permanently
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
x-redirect-by: WordPress
location: https://www.sensitivasarah.it/quam-quo/documents.zip
content-length: 0
content-type: text/html; charset=UTF-8
date: Mon, 12 Sep 2022 05:26:53 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.sensitivasarah.it/nuovo/wp-includes/css/dist/block-library/style.min.css?ver=dd43f6a3c6eeea819153a4913d0293ae | 86.107.32.80 | 200 OK | 89 kB |
URL HTTP/2www.sensitivasarah.it/nuovo/wp-includes/css/dist/block-library/style.min.css?ver=dd43f6a3c6eeea819153a4913d0293ae IP86.107.32.80:0 ASN#52030 Server Plan S.r.l.
File typeASCII text, with very long lines (43771) Hashb7915926fe42d76e9c802353ab01dae4 3a8192a4312f25f53de25b100d62829c0f14d67c d7705700d24d5919255576642ad2c28bfc790390b7183a369038ff5c1e814d51
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /nuovo/wp-includes/css/dist/block-library/style.min.css?ver=dd43f6a3c6eeea819153a4913d0293ae HTTP/1.1
Host: www.sensitivasarah.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.sensitivasarah.it/quam-quo/documents.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 12 Jul 2022 21:57:16 GMT
etag: "23e04b3-15b64-5e3a2c070c10e"
accept-ranges: bytes
content-length: 88932
cache-control: max-age=15552000
expires: Sat, 11 Mar 2023 05:26:53 GMT
content-type: text/css
date: Mon, 12 Sep 2022 05:26:53 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.sensitivasarah.it/nuovo/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.6.3 | 86.107.32.80 | 200 OK | 2.7 kB |
URL HTTP/2www.sensitivasarah.it/nuovo/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.6.3 IP86.107.32.80:0 ASN#52030 Server Plan S.r.l.
Hashe6fae855021a88a0067fcc58121c594f 6299ac3987b5e81725781799dad361d19ac3b99d e50f9ccd2d6582a58ba1879fa578e60d25fea4c5eedc07deafd14482b2403181
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /nuovo/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.6.3 HTTP/1.1
Host: www.sensitivasarah.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.sensitivasarah.it/quam-quo/documents.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 01 Sep 2022 09:56:53 GMT
etag: "238054c-aab-5e79aa20a15e5"
accept-ranges: bytes
content-length: 2731
cache-control: max-age=15552000
expires: Sat, 11 Mar 2023 05:26:53 GMT
content-type: text/css
date: Mon, 12 Sep 2022 05:26:53 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| cdn.iubenda.com/cs/tcf/stub-v2.js |  104.66.117.233 | 200 OK | 1.1 kB |
URL HTTP/2cdn.iubenda.com/cs/tcf/stub-v2.js IP104.66.117.233:0
File typeASCII text, with very long lines (2215), with no line terminators Hashd159177e5f08e81e1aec3293aa41155f 9c377ab182155b144a9b444fc588ac572b4bce5c 0fda2c102b8ac4d8764f352b1f6aede75e57e9a084bc8d5a41cf9c071a64f8de
GET /cs/tcf/stub-v2.js HTTP/1.1
Host: cdn.iubenda.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.sensitivasarah.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
content-encoding: gzip
content-type: application/javascript
etag: "631ae48f-44e"
last-modified: Fri, 09 Sep 2022 07:00:31 GMT
p3p: CP="DSP NOI COR", policyref="http://www.iubenda.com/w3c/p3p.xml"
content-length: 1102
cache-control: public, must-revalidate, proxy-revalidate, max-age=10800
expires: Mon, 12 Sep 2022 08:26:53 GMT
date: Mon, 12 Sep 2022 05:26:53 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 472 B |
IP142.250.74.3:0
Hashbff3a3f3f4f889b08163e7d307438790 c430c7c151973fa0e63ddf52e5624e1ce2282161 bce7d12a2343d8e43fbd05522fe82807ed48933a984aa113c284267364981750
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 12 Sep 2022 05:26:53 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 472 B |
IP142.250.74.3:0
Hashc3d8032059a24d14d00c2ee5d8840c01 62efae1ea6aaea612a12d42b6e5b65d24be11437 2319fe90c8b4d3cc41ec9cce275c82d19fb764015196bd1c52dfb9c5d85b9b0b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 12 Sep 2022 05:26:53 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| cdn.iubenda.com/cs/iubenda_cs.js | 104.66.117.233 | 200 OK | 309 B |
URL HTTP/2cdn.iubenda.com/cs/iubenda_cs.js IP104.66.117.233:0
File typeASCII text, with very long lines (596) Hasha2df856dec5b7941c5b555ee3f8379c6 d52e38f59450027dda022d7c82e9432aa1cd374d 38446436ca1dae88c06a3930a469d986efafe62130dcced6032d6465414e157e
GET /cs/iubenda_cs.js HTTP/1.1
Host: cdn.iubenda.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.sensitivasarah.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
content-encoding: br
content-type: application/javascript
etag: "631ae48f-135"
last-modified: Fri, 09 Sep 2022 07:00:31 GMT
p3p: CP="DSP NOI COR", policyref="http://www.iubenda.com/w3c/p3p.xml"
content-length: 309
cache-control: public, must-revalidate, proxy-revalidate, max-age=10800
expires: Mon, 12 Sep 2022 08:26:53 GMT
date: Mon, 12 Sep 2022 05:26:53 GMT
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 472 B |
IP142.250.74.3:0
Hashc3d8032059a24d14d00c2ee5d8840c01 62efae1ea6aaea612a12d42b6e5b65d24be11437 2319fe90c8b4d3cc41ec9cce275c82d19fb764015196bd1c52dfb9c5d85b9b0b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 12 Sep 2022 05:26:53 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| cdn.iubenda.com/cs/tcf/safe-tcf-v2.js | 104.66.117.233 | 200 OK | 42 kB |
URL HTTP/2cdn.iubenda.com/cs/tcf/safe-tcf-v2.js IP104.66.117.233:0
File typeUnicode text, UTF-8 text, with very long lines (43703), with NEL line terminators Hash661d57d41a5b85342412250216936fac e58f8fb2bd6fafac2b502dd9a79af43672156ac8 a9010a163b98dc06152587adb24849e9b22efafcfbef994d1b6368bfd716a584
GET /cs/tcf/safe-tcf-v2.js HTTP/1.1
Host: cdn.iubenda.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.sensitivasarah.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
content-encoding: br
content-type: application/javascript
etag: "631ae48f-a38e"
last-modified: Fri, 09 Sep 2022 07:00:31 GMT
p3p: CP="DSP NOI COR", policyref="http://www.iubenda.com/w3c/p3p.xml"
content-length: 41870
cache-control: public, must-revalidate, proxy-revalidate, max-age=10800
expires: Mon, 12 Sep 2022 08:26:53 GMT
date: Mon, 12 Sep 2022 05:26:53 GMT
X-Firefox-Spdy: h2
|
|
| www.googletagmanager.com/gtag/js?id=AW-853844490 | 142.250.74.72 | 200 OK | 60 kB |
URL HTTP/2www.googletagmanager.com/gtag/js?id=AW-853844490 IP142.250.74.72:0
File typeASCII text, with very long lines (1825) Hash2149e9f0d9f1b5b87fd6a39ead6a6204 390070dcd038f59e214aed9cbc478dd85f7a5390 99dc9590017f79352fa381d50893be590fe20a3f65f5ec4f1a506c087eefe411
GET /gtag/js?id=AW-853844490 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.sensitivasarah.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 12 Sep 2022 05:26:53 GMT
expires: Mon, 12 Sep 2022 05:26:53 GMT
cache-control: private, max-age=900
last-modified: Mon, 12 Sep 2022 03:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 60388
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| www.sensitivasarah.it/nuovo/wp-content/themes/betheme/assets/animations/animations.min.css?ver=26.2.1 | 86.107.32.80 | 200 OK | 58 kB |
URL HTTP/2www.sensitivasarah.it/nuovo/wp-content/themes/betheme/assets/animations/animations.min.css?ver=26.2.1 IP86.107.32.80:0 ASN#52030 Server Plan S.r.l.
File typeASCII text, with very long lines (58528) Hash16ef9fafa31c4ab6d170431ef2153c33 bd9051c9cf15b2968d2d5b7837ac5c32cb41ce9e 38be46aaa000896df8c89b3d6fc608efe575d822c4f4541cf7ad6b5069ce2879
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /nuovo/wp-content/themes/betheme/assets/animations/animations.min.css?ver=26.2.1 HTTP/1.1
Host: www.sensitivasarah.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.sensitivasarah.it/quam-quo/documents.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 28 Mar 2022 10:51:23 GMT
etag: "23c012b-e4a1-5db4517df89c6"
accept-ranges: bytes
content-length: 58529
cache-control: max-age=15552000
expires: Sat, 11 Mar 2023 05:26:53 GMT
content-type: text/css
date: Mon, 12 Sep 2022 05:26:53 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.sensitivasarah.it/nuovo/wp-content/themes/betheme/css/be.min.css?ver=26.2.1 | 86.107.32.80 | 200 OK | 332 kB |
URL HTTP/2www.sensitivasarah.it/nuovo/wp-content/themes/betheme/css/be.min.css?ver=26.2.1 IP86.107.32.80:0 ASN#52030 Server Plan S.r.l.
File typeASCII text, with very long lines (65536), with no line terminators Size332 kB (331913 bytes) Hash0e82b0489871aff2e903c48ed8cd9c47 6b893cd6376da31e2c92f7286d4baadcb9d29ab4 902601a4faa63739596132fcf0a6702b2555131d8db54666eea6381bfc296590
GET /nuovo/wp-content/themes/betheme/css/be.min.css?ver=26.2.1 HTTP/1.1
Host: www.sensitivasarah.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.sensitivasarah.it/quam-quo/documents.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 28 Mar 2022 10:51:22 GMT
etag: "23c0151-51089-5db4517d39b0f"
accept-ranges: bytes
content-length: 331913
cache-control: max-age=15552000
expires: Sat, 11 Mar 2023 05:26:53 GMT
content-type: text/css
date: Mon, 12 Sep 2022 05:26:53 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.sensitivasarah.it/nuovo/wp-content/themes/betheme/assets/jplayer/css/jplayer.blue.monday.min.css?ver=26.2.1 | 86.107.32.80 | 200 OK | 9.7 kB |
URL HTTP/2www.sensitivasarah.it/nuovo/wp-content/themes/betheme/assets/jplayer/css/jplayer.blue.monday.min.css?ver=26.2.1 IP86.107.32.80:0 ASN#52030 Server Plan S.r.l.
File typeASCII text, with very long lines (6505) Hashf81285dcfbad6bcd0ecfa031da4222ee e285b4e561d9430bbcd567c04eef43a72eee691f 10f8e5f272c9ae8c8271ab51d7310aaf9c9bed694104dbe6ff10d99849d19ab8
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /nuovo/wp-content/themes/betheme/assets/jplayer/css/jplayer.blue.monday.min.css?ver=26.2.1 HTTP/1.1
Host: www.sensitivasarah.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.sensitivasarah.it/quam-quo/documents.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 28 Mar 2022 10:51:23 GMT
etag: "23c0131-25ef-5db4517dfa907"
accept-ranges: bytes
content-length: 9711
cache-control: max-age=15552000
expires: Sat, 11 Mar 2023 05:26:53 GMT
content-type: text/css
date: Mon, 12 Sep 2022 05:26:53 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 472 B |
IP142.250.74.3:0
Hashbff3a3f3f4f889b08163e7d307438790 c430c7c151973fa0e63ddf52e5624e1ce2282161 bce7d12a2343d8e43fbd05522fe82807ed48933a984aa113c284267364981750
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 12 Sep 2022 05:26:53 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| www.sensitivasarah.it/nuovo/wp-content/themes/betheme/css/responsive.min.css?ver=26.2.1 | 86.107.32.80 | 200 OK | 54 kB |
URL HTTP/2www.sensitivasarah.it/nuovo/wp-content/themes/betheme/css/responsive.min.css?ver=26.2.1 IP86.107.32.80:0 ASN#52030 Server Plan S.r.l.
File typeASCII text, with very long lines (54006) Hash45952d4a52a433908fb3e081fb80fb94 747b33d84e2294123fd7952111fa4624e37a8275 8d60d485ffbdb4f149db2b68060dcbdc07a8b6be3058ab8a8a4b5a6f7ed59398
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /nuovo/wp-content/themes/betheme/css/responsive.min.css?ver=26.2.1 HTTP/1.1
Host: www.sensitivasarah.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.sensitivasarah.it/quam-quo/documents.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 28 Mar 2022 10:51:22 GMT
etag: "23c0156-d2f7-5db4517d38b6f"
accept-ranges: bytes
content-length: 54007
cache-control: max-age=15552000
expires: Sat, 11 Mar 2023 05:26:53 GMT
content-type: text/css
date: Mon, 12 Sep 2022 05:26:53 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.sensitivasarah.it/nuovo/wp-content/themes/betheme/fonts/fontawesome/fontawesome.min.css?ver=26.2.1 | 86.107.32.80 | 200 OK | 59 kB |
URL HTTP/2www.sensitivasarah.it/nuovo/wp-content/themes/betheme/fonts/fontawesome/fontawesome.min.css?ver=26.2.1 IP86.107.32.80:0 ASN#52030 Server Plan S.r.l.
File typeASCII text, with very long lines (58929), with no line terminators Hashe50a949a668d92a0dcedb41bd719fd3d 955f1b537db90c38ef07c6f219e4a61e3c49a2a3 ae20b5bbb2149fa3686fdb8059bd98678342a18b686b07aec425d4d575adac69
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /nuovo/wp-content/themes/betheme/fonts/fontawesome/fontawesome.min.css?ver=26.2.1 HTTP/1.1
Host: www.sensitivasarah.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.sensitivasarah.it/quam-quo/documents.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 28 Mar 2022 10:51:23 GMT
etag: "23c0181-e631-5db4517dd66e5"
accept-ranges: bytes
content-length: 58929
cache-control: max-age=15552000
expires: Sat, 11 Mar 2023 05:26:53 GMT
content-type: text/css
date: Mon, 12 Sep 2022 05:26:53 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.sensitivasarah.it/nuovo/wp-content/plugins/wordpress-whatsapp-support/assets/css/wws-public-template-4.css?ver=2.3.2 | 86.107.32.80 | 200 OK | 133 B |
URL HTTP/2www.sensitivasarah.it/nuovo/wp-content/plugins/wordpress-whatsapp-support/assets/css/wws-public-template-4.css?ver=2.3.2 IP86.107.32.80:0 ASN#52030 Server Plan S.r.l.
Hashb1a6802240de9fffe6e3154d3db5f00e 6abb88729f219e7aea2ad00732a44a57ae915f33 5df3ece7ad87c5bc1eaf4a1fa32fb48d79494a1e0c34d9b19035318d564dd9c9
GET /nuovo/wp-content/plugins/wordpress-whatsapp-support/assets/css/wws-public-template-4.css?ver=2.3.2 HTTP/1.1
Host: www.sensitivasarah.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.sensitivasarah.it/quam-quo/documents.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 14 Aug 2022 17:11:20 GMT
etag: "3182e77-85-5e6369aa0f999"
accept-ranges: bytes
content-length: 133
cache-control: max-age=15552000
expires: Sat, 11 Mar 2023 05:26:53 GMT
content-type: text/css
date: Mon, 12 Sep 2022 05:26:53 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.sensitivasarah.it/nuovo/wp-content/plugins/wordpress-whatsapp-support/assets/css/wws-public-style.css?ver=2.3.2 | 86.107.32.80 | 200 OK | 2.2 kB |
URL HTTP/2www.sensitivasarah.it/nuovo/wp-content/plugins/wordpress-whatsapp-support/assets/css/wws-public-style.css?ver=2.3.2 IP86.107.32.80:0 ASN#52030 Server Plan S.r.l.
Hashd340fa66180045701bcc935507963196 34b6bf380e2a1249329a34ec0f99030ed24161c4 b74b6accba723981a5a2d26fc97db8c31e62ca02aaab392120892d4f1ffb43ab
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /nuovo/wp-content/plugins/wordpress-whatsapp-support/assets/css/wws-public-style.css?ver=2.3.2 HTTP/1.1
Host: www.sensitivasarah.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.sensitivasarah.it/quam-quo/documents.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 14 Aug 2022 17:11:20 GMT
etag: "3182e78-8c0-5e6369aa0f999"
accept-ranges: bytes
content-length: 2240
cache-control: max-age=15552000
expires: Sat, 11 Mar 2023 05:26:53 GMT
content-type: text/css
date: Mon, 12 Sep 2022 05:26:53 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 472 B |
IP142.250.74.3:0
Hashc3d8032059a24d14d00c2ee5d8840c01 62efae1ea6aaea612a12d42b6e5b65d24be11437 2319fe90c8b4d3cc41ec9cce275c82d19fb764015196bd1c52dfb9c5d85b9b0b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 12 Sep 2022 05:26:53 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| www.sensitivasarah.it/nuovo/wp-content/plugins/call-now-button/resources/style/modern.css?ver=1.2.1 | 86.107.32.80 | 200 OK | 4.5 kB |
URL HTTP/2www.sensitivasarah.it/nuovo/wp-content/plugins/call-now-button/resources/style/modern.css?ver=1.2.1 IP86.107.32.80:0 ASN#52030 Server Plan S.r.l.
Hashe5462eb1094e15f13f6c01dafab314c0 c4b013175569e35cdba4cfb096d0a5429ff1e8b9 5469645f5b6fca336e0bf409452a8923cf22e50e7cdc3634fabdcab613e6552c
GET /nuovo/wp-content/plugins/call-now-button/resources/style/modern.css?ver=1.2.1 HTTP/1.1
Host: www.sensitivasarah.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.sensitivasarah.it/quam-quo/documents.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 07 Sep 2022 21:43:58 GMT
etag: "3340581-1178-5e81d35d08cec"
accept-ranges: bytes
content-length: 4472
cache-control: max-age=15552000
expires: Sat, 11 Mar 2023 05:26:53 GMT
content-type: text/css
date: Mon, 12 Sep 2022 05:26:53 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.sensitivasarah.it/nuovo/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 | 86.107.32.80 | 200 OK | 11 kB |
URL HTTP/2www.sensitivasarah.it/nuovo/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 IP86.107.32.80:0 ASN#52030 Server Plan S.r.l.
File typeASCII text, with very long lines (11126) Hash79b4956b7ec478ec10244b5e2d33ac7d a46025b9d05e3df30d610a8aef14f392c7058dc9 029e0a2e809fd6b5dbe76abe8b7a74936be306c9a8c27c814c4d44aa54623300
GET /nuovo/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1
Host: www.sensitivasarah.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.sensitivasarah.it/quam-quo/documents.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 26 Nov 2021 09:24:18 GMT
etag: "23e0681-2bd8-5d1ada7c7f480"
accept-ranges: bytes
content-length: 11224
cache-control: max-age=15552000
expires: Sat, 11 Mar 2023 05:26:53 GMT
content-type: application/javascript
date: Mon, 12 Sep 2022 05:26:53 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.sensitivasarah.it/nuovo/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.6.3 | 86.107.32.80 | 200 OK | 12 kB |
URL HTTP/2www.sensitivasarah.it/nuovo/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.6.3 IP86.107.32.80:0 ASN#52030 Server Plan S.r.l.
File typeHTML document, ASCII text, with very long lines (12211), with no line terminators Hash3f3fc23f477a3849aa5677c585b2a2b4 ccf0865ebd37f76c450c7a377a86ff2448288db3 985fdd42398281348ca133a44750a56fe4909a806b9c075c9443a5d0bd6d2e51
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /nuovo/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.6.3 HTTP/1.1
Host: www.sensitivasarah.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.sensitivasarah.it/quam-quo/documents.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 01 Sep 2022 09:56:53 GMT
etag: "238012e-2fb3-5e79aa209f6a5"
accept-ranges: bytes
content-length: 12211
cache-control: max-age=15552000
expires: Sat, 11 Mar 2023 05:26:53 GMT
content-type: application/javascript
date: Mon, 12 Sep 2022 05:26:53 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.sensitivasarah.it/nuovo/wp-content/plugins/revslider/public/assets/css/rs6.css?ver=6.5.19 | 86.107.32.80 | 200 OK | 59 kB |
URL HTTP/2www.sensitivasarah.it/nuovo/wp-content/plugins/revslider/public/assets/css/rs6.css?ver=6.5.19 IP86.107.32.80:0 ASN#52030 Server Plan S.r.l.
File typeUnicode text, UTF-8 text, with very long lines (12602), with CRLF line terminators Hashaa4c7e30d0f121bf25a7f892dc618ea9 09dc35a42918427d0943cdf6c96805aeeed1664c 9435c8c132bbfd387d4b14f9e07d60c0ba7fb5a1eca2b49882f62b2ef113eee8
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /nuovo/wp-content/plugins/revslider/public/assets/css/rs6.css?ver=6.5.19 HTTP/1.1
Host: www.sensitivasarah.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.sensitivasarah.it/quam-quo/documents.zip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 28 Mar 2022 10:42:38 GMT
etag: "23814f3-e712-5db44f899bdd8"
accept-ranges: bytes
content-length: 59154
cache-control: max-age=15552000
expires: Sat, 11 Mar 2023 05:26:53 GMT
content-type: text/css
date: Mon, 12 Sep 2022 05:26:53 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| cdn.iubenda.com/cookie_solution/iubenda_cs/1.41.0/core-it.js | 104.66.117.233 | 200 OK | 61 kB |
URL HTTP/2cdn.iubenda.com/cookie_solution/iubenda_cs/1.41.0/core-it.js IP104.66.117.233:0
File typeUnicode text, UTF-8 text, with very long lines (65288), with no line terminators Hash3cf9ededcf84a86cb422a3990e289c4d 6b2b00b0c7d207597e21d3479d0c850075cfb976 190097e0437ce3588cdf80f74529e5612122ab3a5aa46191f37b2bfdf600aa5e
GET /cookie_solution/iubenda_cs/1.41.0/core-it.js HTTP/1.1
Host: cdn.iubenda.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.sensitivasarah.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
content-encoding: br
content-type: application/javascript
etag: "631ae48f-edeb"
last-modified: Fri, 09 Sep 2022 07:00:31 GMT
p3p: CP="DSP NOI COR", policyref="http://www.iubenda.com/w3c/p3p.xml"
content-length: 60907
cache-control: public, must-revalidate, proxy-revalidate, max-age=31536000
expires: Tue, 12 Sep 2023 05:26:53 GMT
date: Mon, 12 Sep 2022 05:26:53 GMT
X-Firefox-Spdy: h2
|
|
| www.sensitivasarah.it/nuovo/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.6.3 | 86.107.32.80 | 200 OK | 9.7 kB |
URL HTTP/2www.sensitivasarah.it/nuovo/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.6.3 IP86.107.32.80:0 ASN#52030 Server Plan S.r.l.
File typeASCII text, with very long lines (9680), with no line terminators Hash490c29d6776fc430c23403fd845b34b0 817129906b7fef1011895a76f047c7693a852e21 29e8de26576208c07ba0845f604e65c9273b93f9f4d1d66214eb4c586f9938c4
GET /nuovo/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.6.3 HTTP/1.1
Host: www.sensitivasarah.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.sensitivasarah.it/quam-quo/documents.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 01 Sep 2022 09:56:53 GMT
etag: "2380554-25d0-5e79aa20a219d"
accept-ranges: bytes
content-length: 9680
cache-control: max-age=15552000
expires: Sat, 11 Mar 2023 05:26:53 GMT
content-type: application/javascript
date: Mon, 12 Sep 2022 05:26:53 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.sensitivasarah.it/nuovo/wp-content/plugins/revslider/public/assets/js/rbtools.min.js?ver=6.5.18 | 86.107.32.80 | 200 OK | 129 kB |
URL HTTP/2www.sensitivasarah.it/nuovo/wp-content/plugins/revslider/public/assets/js/rbtools.min.js?ver=6.5.18 IP86.107.32.80:0 ASN#52030 Server Plan S.r.l.
File typeASCII text, with very long lines (45108), with CRLF line terminators Size129 kB (128805 bytes) Hash0ce245fda586eafae053aa341ccdd2c7 3f0e5d08540860f4e1c4ba0db2bd3decf481ea44 5c9203860ae657336596c738730f9d362e00bb9948a0f581fb074270c328e26b
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /nuovo/wp-content/plugins/revslider/public/assets/js/rbtools.min.js?ver=6.5.18 HTTP/1.1
Host: www.sensitivasarah.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.sensitivasarah.it/quam-quo/documents.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 28 Mar 2022 10:42:38 GMT
etag: "2381519-1f725-5db44f89acb61"
accept-ranges: bytes
content-length: 128805
cache-control: max-age=15552000
expires: Sat, 11 Mar 2023 05:26:53 GMT
content-type: application/javascript
date: Mon, 12 Sep 2022 05:26:53 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 95.101.11.115 | 200 OK | 503 B |
IP95.101.11.115:0 ASN#20940 Akamai International B.V.
Hash477fd76de0b69553430d504fe527cc06 88fe80a099e610212f27427ae6fd5b4e03b3df16 f27bc8051a23fbe811318b8d49f5d27e3e992962a0e72f5d30a4790fe4f42748
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F27BC8051A23FBE811318B8D49F5D27E3E992962A0E72F5D30A4790FE4F42748"
Last-Modified: Sat, 10 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12945
Expires: Mon, 12 Sep 2022 09:02:38 GMT
Date: Mon, 12 Sep 2022 05:26:53 GMT
Connection: keep-alive
|
|
| www.sensitivasarah.it/nuovo/wp-content/plugins/revslider/public/assets/js/rs6.min.js?ver=6.5.19 | 86.107.32.80 | 200 OK | 387 kB |
URL HTTP/2www.sensitivasarah.it/nuovo/wp-content/plugins/revslider/public/assets/js/rs6.min.js?ver=6.5.19 IP86.107.32.80:0 ASN#52030 Server Plan S.r.l.
File typeASCII text, with very long lines (64288) Size387 kB (386778 bytes) Hash811c3da189b804d68fced85b9a191e1e bc4d1ec616ba622029414fbceb0bc8d9e903f3fc 3b0b8378134e79a3a7058080f4d617969ac9b159d448be7b15e595719e5c9518
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /nuovo/wp-content/plugins/revslider/public/assets/js/rs6.min.js?ver=6.5.19 HTTP/1.1
Host: www.sensitivasarah.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.sensitivasarah.it/quam-quo/documents.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 28 Mar 2022 10:42:38 GMT
etag: "238151a-5e6da-5db44f89ab7d9"
accept-ranges: bytes
content-length: 386778
cache-control: max-age=15552000
expires: Sat, 11 Mar 2023 05:26:53 GMT
content-type: application/javascript
date: Mon, 12 Sep 2022 05:26:53 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 95.101.11.115 | 200 OK | 503 B |
IP95.101.11.115:0 ASN#20940 Akamai International B.V.
Hash477fd76de0b69553430d504fe527cc06 88fe80a099e610212f27427ae6fd5b4e03b3df16 f27bc8051a23fbe811318b8d49f5d27e3e992962a0e72f5d30a4790fe4f42748
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F27BC8051A23FBE811318B8D49F5D27E3E992962A0E72F5D30A4790FE4F42748"
Last-Modified: Sat, 10 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12945
Expires: Mon, 12 Sep 2022 09:02:38 GMT
Date: Mon, 12 Sep 2022 05:26:53 GMT
Connection: keep-alive
|
|
| www.sensitivasarah.it/nuovo/wp-includes/js/jquery/ui/core.min.js?ver=1.13.1 | 86.107.32.80 | 200 OK | 21 kB |
URL HTTP/2www.sensitivasarah.it/nuovo/wp-includes/js/jquery/ui/core.min.js?ver=1.13.1 IP86.107.32.80:0 ASN#52030 Server Plan S.r.l.
File typeUnicode text, UTF-8 text, with very long lines (8189) Hash6aaf0a4e8eac131defea126f5b1b5fbf 24da0326af36303e5a1e9799a3c26f7a1077928c 240b702419d6c39ecc4896f0132ccfc9bc517e9aef0c782d99580e0c678b47d5
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /nuovo/wp-includes/js/jquery/ui/core.min.js?ver=1.13.1 HTTP/1.1
Host: www.sensitivasarah.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.sensitivasarah.it/quam-quo/documents.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 11 Jun 2022 11:09:01 GMT
etag: "23e069d-50eb-5e12a151167b9"
accept-ranges: bytes
content-length: 20715
cache-control: max-age=15552000
expires: Sat, 11 Mar 2023 05:26:53 GMT
content-type: application/javascript
date: Mon, 12 Sep 2022 05:26:53 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.sensitivasarah.it/nuovo/wp-includes/js/jquery/ui/tabs.min.js?ver=1.13.1 | 86.107.32.80 | 200 OK | 12 kB |
URL HTTP/2www.sensitivasarah.it/nuovo/wp-includes/js/jquery/ui/tabs.min.js?ver=1.13.1 IP86.107.32.80:0 ASN#52030 Server Plan S.r.l.
File typeASCII text, with very long lines (11760) Hash1d376be55e51aea00d432f6659d3e0d1 cc5b9f6fa12d0a90b38d3d6e918401c9ad26332b 34934dc0d2652647955344d4d53218860096f14217c81c1eb5b02e54526835b6
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /nuovo/wp-includes/js/jquery/ui/tabs.min.js?ver=1.13.1 HTTP/1.1
Host: www.sensitivasarah.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.sensitivasarah.it/quam-quo/documents.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 11 Jun 2022 11:09:01 GMT
etag: "23e06d9-2ea1-5e12a15116ba1"
accept-ranges: bytes
content-length: 11937
cache-control: max-age=15552000
expires: Sat, 11 Mar 2023 05:26:53 GMT
content-type: application/javascript
date: Mon, 12 Sep 2022 05:26:53 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.sensitivasarah.it/nuovo/wp-content/themes/betheme/js/menu.min.js?ver=26.2.1 | 86.107.32.80 | 200 OK | 1.4 kB |
URL HTTP/2www.sensitivasarah.it/nuovo/wp-content/themes/betheme/js/menu.min.js?ver=26.2.1 IP86.107.32.80:0 ASN#52030 Server Plan S.r.l.
File typeASCII text, with very long lines (1355), with no line terminators Hashcafd8c8f960f42c045ed2c9ad088a4e9 fcc0747bac99b5a4f25fc3942316858a6341a996 964f977897216e7ebbab9c327111636f04f1ee5a3b71e7ad2ccde95947c5222d
GET /nuovo/wp-content/themes/betheme/js/menu.min.js?ver=26.2.1 HTTP/1.1
Host: www.sensitivasarah.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.sensitivasarah.it/quam-quo/documents.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 28 Mar 2022 10:51:23 GMT
etag: "23c041c-54b-5db4517dd99ad"
accept-ranges: bytes
content-length: 1355
cache-control: max-age=15552000
expires: Sat, 11 Mar 2023 05:26:53 GMT
content-type: application/javascript
date: Mon, 12 Sep 2022 05:26:53 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.sensitivasarah.it/nuovo/wp-content/plugins/wordpress-whatsapp-support/assets/js/wws-public-script.js?ver=2.3.2 | 86.107.32.80 | 200 OK | 14 kB |
URL HTTP/2www.sensitivasarah.it/nuovo/wp-content/plugins/wordpress-whatsapp-support/assets/js/wws-public-script.js?ver=2.3.2 IP86.107.32.80:0 ASN#52030 Server Plan S.r.l.
Hasheeb610a9054bdae3ff02f0e3acfe9498 c5abd857449abe898d97632a422a855d49da338b 758b356507bb190929d99a7fe39cde5df1a3209ce15d4d466cf397f7c77d92ce
GET /nuovo/wp-content/plugins/wordpress-whatsapp-support/assets/js/wws-public-script.js?ver=2.3.2 HTTP/1.1
Host: www.sensitivasarah.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.sensitivasarah.it/quam-quo/documents.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 14 Aug 2022 17:11:20 GMT
etag: "3160e40-3525-5e6369aa0d671"
accept-ranges: bytes
content-length: 13605
cache-control: max-age=15552000
expires: Sat, 11 Mar 2023 05:26:53 GMT
content-type: application/javascript
date: Mon, 12 Sep 2022 05:26:53 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F75931920-737e-40b5-8dd6-d2070639ea2d.jpeg | 34.120.237.76 | 200 OK | 8.8 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F75931920-737e-40b5-8dd6-d2070639ea2d.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashc14088c4ca0d576e087feed41b7f1565 172b23f2ef39b6c3fdebb5441b10a95712206d0a 2699efa811ceac5420f5bd26c35a6f48b51854e29cbce7cbb62efb613db7d6b9
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F75931920-737e-40b5-8dd6-d2070639ea2d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8799
x-amzn-requestid: 1bcdf387-9ad2-449a-861e-3352b1744d23
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YUI-0G6vIAMFgbA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631e552b-42aa46af6315148106c4fdee;Sampled=0
x-amzn-remapped-date: Sun, 11 Sep 2022 21:37:47 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: g2mxKK8L5T4YkeD8JqNUuV_KfsIq8ypRMvxhsyzSZSEIP4gDl4zLVQ==
via: 1.1 d83ae0e1ba84e92e58bc1efc23a0c652.cloudfront.net (CloudFront), 1.1 aef00f14752da9aa504d392fd46eff94.cloudfront.net (CloudFront), 1.1 google
date: Sun, 11 Sep 2022 21:41:51 GMT
age: 27902
etag: "172b23f2ef39b6c3fdebb5441b10a95712206d0a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 95.101.11.115 | 200 OK | 503 B |
IP95.101.11.115:0 ASN#20940 Akamai International B.V.
Hash477fd76de0b69553430d504fe527cc06 88fe80a099e610212f27427ae6fd5b4e03b3df16 f27bc8051a23fbe811318b8d49f5d27e3e992962a0e72f5d30a4790fe4f42748
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F27BC8051A23FBE811318B8D49F5D27E3E992962A0E72F5D30A4790FE4F42748"
Last-Modified: Sat, 10 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12945
Expires: Mon, 12 Sep 2022 09:02:38 GMT
Date: Mon, 12 Sep 2022 05:26:53 GMT
Connection: keep-alive
|
|
| www.sensitivasarah.it/nuovo/wp-content/themes/betheme/assets/animations/animations.min.js?ver=26.2.1 | 86.107.32.80 | 200 OK | 1.8 kB |
URL HTTP/2www.sensitivasarah.it/nuovo/wp-content/themes/betheme/assets/animations/animations.min.js?ver=26.2.1 IP86.107.32.80:0 ASN#52030 Server Plan S.r.l.
File typeASCII text, with very long lines (1733) Hash6d1ef4ab8b112c1e2642e61424bd46b4 9fb2f893a18752e5123314c41c453636ec77e390 d1bbd7ecc1eb2490fa89949a1af779e82a0817587e19a8396936ed86e430550b
GET /nuovo/wp-content/themes/betheme/assets/animations/animations.min.js?ver=26.2.1 HTTP/1.1
Host: www.sensitivasarah.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.sensitivasarah.it/quam-quo/documents.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 28 Mar 2022 10:51:23 GMT
etag: "23c012c-727-5db4517df8dae"
accept-ranges: bytes
content-length: 1831
cache-control: max-age=15552000
expires: Sat, 11 Mar 2023 05:26:53 GMT
content-type: application/javascript
date: Mon, 12 Sep 2022 05:26:53 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7203a6d4-6a03-44c9-9578-48347e449af7.jpeg | 34.120.237.76 | 200 OK | 8.8 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7203a6d4-6a03-44c9-9578-48347e449af7.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashbd72daa080a70fd2dd1cac6825ac2794 66c5e224483b5265d219050553ec98624558c9e9 051aaa5b3872f2d989d007f3ffdd5e96df582d0c950ac976d3befeefe60f6663
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7203a6d4-6a03-44c9-9578-48347e449af7.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8843
x-amzn-requestid: 756d47bd-2bcd-43eb-b338-b0e42b7014e9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YUIxfFeuIAMFlWw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631e54d6-1048244b1718b8d21cf0a2e3;Sampled=0
x-amzn-remapped-date: Sun, 11 Sep 2022 21:36:22 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: zjRJXhMV-c7STru92ODP2iIjeugCVD1joQovkAHmzJHHne3cPZkpPQ==
via: 1.1 8dbfaf7df256a75768461d934659b6b2.cloudfront.net (CloudFront), 1.1 112d82578d402a38d8d02e8b857617e0.cloudfront.net (CloudFront), 1.1 google
date: Sun, 11 Sep 2022 21:41:51 GMT
age: 27902
etag: "66c5e224483b5265d219050553ec98624558c9e9"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 95.101.11.115 | 200 OK | 503 B |
IP95.101.11.115:0 ASN#20940 Akamai International B.V.
Hash477fd76de0b69553430d504fe527cc06 88fe80a099e610212f27427ae6fd5b4e03b3df16 f27bc8051a23fbe811318b8d49f5d27e3e992962a0e72f5d30a4790fe4f42748
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F27BC8051A23FBE811318B8D49F5D27E3E992962A0E72F5D30A4790FE4F42748"
Last-Modified: Sat, 10 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12945
Expires: Mon, 12 Sep 2022 09:02:38 GMT
Date: Mon, 12 Sep 2022 05:26:53 GMT
Connection: keep-alive
|
|
| www.sensitivasarah.it/nuovo/wp-content/themes/betheme/js/scripts.min.js?ver=26.2.1 | 86.107.32.80 | 200 OK | 46 kB |
URL HTTP/2www.sensitivasarah.it/nuovo/wp-content/themes/betheme/js/scripts.min.js?ver=26.2.1 IP86.107.32.80:0 ASN#52030 Server Plan S.r.l.
File typeASCII text, with very long lines (46042), with no line terminators Hash92f3c5bed5fa46ff60fe8a66d1af2528 589ca14d48145e8cfae54af2ac96f7fca0e73c34 87bec1e20794c02c0b2d052c52744c096f0868e6fcadb60008facba3afe02034
GET /nuovo/wp-content/themes/betheme/js/scripts.min.js?ver=26.2.1 HTTP/1.1
Host: www.sensitivasarah.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.sensitivasarah.it/quam-quo/documents.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 28 Mar 2022 10:51:23 GMT
etag: "23c0420-b3da-5db4517dd9d95"
accept-ranges: bytes
content-length: 46042
cache-control: max-age=15552000
expires: Sat, 11 Mar 2023 05:26:53 GMT
content-type: application/javascript
date: Mon, 12 Sep 2022 05:26:53 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4d72ce1b-951e-4f1f-97b1-db99c399d5f9.jpeg | 34.120.237.76 | 200 OK | 8.2 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4d72ce1b-951e-4f1f-97b1-db99c399d5f9.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hasheee5b4d617dab6f10d7053f5c4f4e98e 6c728c56797ba921e8001919df4d36e56dd37e54 76a53e2c81ec8da2bc469760b2c57098d587c6a36fa70e5b7c743a224a47d362
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4d72ce1b-951e-4f1f-97b1-db99c399d5f9.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8171
x-amzn-requestid: a3eb931f-cd71-4738-acb1-4398fc09f453
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YOa7QGqoIAMFwlw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631c0b7b-2a6ed8ca00a0a0640110cf5d;Sampled=0
x-amzn-remapped-date: Sat, 10 Sep 2022 03:58:51 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: QuUPVSWCQk9z9xI03trHifaWzOi5TqBZHLena93lrxhjlAG1PICKKA==
via: 1.1 000f4a2f631bace380a0afa747a82482.cloudfront.net (CloudFront), 1.1 09331f0822fc98eebaf04130a83dbd44.cloudfront.net (CloudFront), 1.1 google
date: Sun, 11 Sep 2022 12:19:15 GMT
age: 61658
etag: "6c728c56797ba921e8001919df4d36e56dd37e54"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 95.101.11.115 | 200 OK | 503 B |
IP95.101.11.115:0 ASN#20940 Akamai International B.V.
Hash477fd76de0b69553430d504fe527cc06 88fe80a099e610212f27427ae6fd5b4e03b3df16 f27bc8051a23fbe811318b8d49f5d27e3e992962a0e72f5d30a4790fe4f42748
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F27BC8051A23FBE811318B8D49F5D27E3E992962A0E72F5D30A4790FE4F42748"
Last-Modified: Sat, 10 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12945
Expires: Mon, 12 Sep 2022 09:02:38 GMT
Date: Mon, 12 Sep 2022 05:26:53 GMT
Connection: keep-alive
|
|
| www.sensitivasarah.it/nuovo/wp-content/themes/betheme/assets/jplayer/jplayer.min.js?ver=26.2.1 | 86.107.32.80 | 200 OK | 53 kB |
URL HTTP/2www.sensitivasarah.it/nuovo/wp-content/themes/betheme/assets/jplayer/jplayer.min.js?ver=26.2.1 IP86.107.32.80:0 ASN#52030 Server Plan S.r.l.
File typeASCII text, with very long lines (634) Hash0ba3e2243f42575817b07fcadacf8269 50ed3259514f428897730c9d429974bdc72eb988 6e6c69ba30da65996fe5cfd06a9248ad71966d7f05781b646d87358a7e202511
GET /nuovo/wp-content/themes/betheme/assets/jplayer/jplayer.min.js?ver=26.2.1 HTTP/1.1
Host: www.sensitivasarah.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.sensitivasarah.it/quam-quo/documents.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 28 Mar 2022 10:51:23 GMT
etag: "23c012f-cd61-5db4517dfb4bf"
accept-ranges: bytes
content-length: 52577
cache-control: max-age=15552000
expires: Sat, 11 Mar 2023 05:26:53 GMT
content-type: application/javascript
date: Mon, 12 Sep 2022 05:26:53 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.sensitivasarah.it/nuovo/wp-content/plugins/wordpress-whatsapp-support/assets/libraries/inputmask/jquery.inputmask.min.js?ver=5.0.6 | 86.107.32.80 | 200 OK | 94 kB |
URL HTTP/2www.sensitivasarah.it/nuovo/wp-content/plugins/wordpress-whatsapp-support/assets/libraries/inputmask/jquery.inputmask.min.js?ver=5.0.6 IP86.107.32.80:0 ASN#52030 Server Plan S.r.l.
File typeASCII text, with very long lines (65359) Hash273805d7079dbede7b27077f96565ed5 a7afaa53fe561f8902a81b00befc06aff54475da d0f1a75c0399f20ad2dbaabbe39b22b73a64800e2a4aba52787f4190e41faffa
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /nuovo/wp-content/plugins/wordpress-whatsapp-support/assets/libraries/inputmask/jquery.inputmask.min.js?ver=5.0.6 HTTP/1.1
Host: www.sensitivasarah.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.sensitivasarah.it/quam-quo/documents.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 14 Aug 2022 17:11:20 GMT
etag: "3182e5d-16e88-5e6369aa0ede1"
accept-ranges: bytes
content-length: 93832
cache-control: max-age=15552000
expires: Sat, 11 Mar 2023 05:26:53 GMT
content-type: application/javascript
date: Mon, 12 Sep 2022 05:26:53 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.sensitivasarah.it/nuovo/wp-includes/js/wp-emoji-release.min.js?ver=dd43f6a3c6eeea819153a4913d0293ae | 86.107.32.80 | 200 OK | 19 kB |
URL HTTP/2www.sensitivasarah.it/nuovo/wp-includes/js/wp-emoji-release.min.js?ver=dd43f6a3c6eeea819153a4913d0293ae IP86.107.32.80:0 ASN#52030 Server Plan S.r.l.
File typeASCII text, with very long lines (15660) Hash32beb68a374e3aeac00abdf9e12b84ea b5d18aa625e8696dd9d07cd0869337717b211ae0 5aad5fbd4238981a9ff5e2772ff1353dfe1a801fb49542fe157418c1438f7782
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /nuovo/wp-includes/js/wp-emoji-release.min.js?ver=dd43f6a3c6eeea819153a4913d0293ae HTTP/1.1
Host: www.sensitivasarah.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.sensitivasarah.it/quam-quo/documents.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 11 Jun 2022 11:09:01 GMT
etag: "23e05d8-48b9-5e12a15110228"
accept-ranges: bytes
content-length: 18617
cache-control: max-age=15552000
expires: Sat, 11 Mar 2023 05:26:53 GMT
content-type: application/javascript
date: Mon, 12 Sep 2022 05:26:53 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6bb54538-5f31-44e8-8743-582e31d384e4.jpeg | 34.120.237.76 | 200 OK | 5.7 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6bb54538-5f31-44e8-8743-582e31d384e4.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash63d953ea7dce676e8b1c6fcab9f8eab7 5a359aed379e554c5c9885cc8f7a3bff7447d246 428029d6b65a52758df9fd8cb284df83ca4685031126b0ab5b60764a3e2d1a27
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6bb54538-5f31-44e8-8743-582e31d384e4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5709
x-amzn-requestid: 747b7be7-356b-4a9e-9869-4b8f71e66f53
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YMl6sHaoIAMF2lA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631b5044-0c6b0f57046b79cf56ecbf39;Sampled=0
x-amzn-remapped-date: Fri, 09 Sep 2022 14:40:04 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: dr4bY4RW6uq9WbrOmDnzqSUSYRgvbqP30MsMCA6ne_WND-u-1QkSeg==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 e80693c02cfdfd081110512210d57840.cloudfront.net (CloudFront), 1.1 google
date: Sun, 11 Sep 2022 23:28:04 GMT
age: 21529
etag: "5a359aed379e554c5c9885cc8f7a3bff7447d246"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0f86a13b-1b13-4298-8397-2a35d951a8f4.jpeg | 34.120.237.76 | 200 OK | 8.5 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0f86a13b-1b13-4298-8397-2a35d951a8f4.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash7407173746b961cba0f774536bdc5406 7c8363a01b498ae9299a9205d779499f00a477b4 4dc901dfa6637f4e2205813f7b62938a6c1c45577bb1eff8b22bc2c391d54759
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0f86a13b-1b13-4298-8397-2a35d951a8f4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8461
x-amzn-requestid: 8f7492c7-ae65-4dd5-8ee9-85a2e2fc80dc
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YLVAaEt3oAMFcnw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631acecf-2db2074c53de3db23380767b;Sampled=0
x-amzn-remapped-date: Fri, 09 Sep 2022 05:27:43 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: i_owD4dJj7jUDaSavHZXSr8Ker2gJa_zzCycmTra0GqdRI9qCLeWFQ==
via: 1.1 010c0731b9775a983eceaec0f5fa6a2e.cloudfront.net (CloudFront), 1.1 7022a5bbf9872d4a09d63e6cdb457dfe.cloudfront.net (CloudFront), 1.1 google
date: Sun, 11 Sep 2022 12:09:35 GMT
age: 62239
etag: "7c8363a01b498ae9299a9205d779499f00a477b4"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F36ab1cf7-da3f-4bea-abd5-3f9da5a18c29.jpeg | 34.120.237.76 | 200 OK | 9.1 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F36ab1cf7-da3f-4bea-abd5-3f9da5a18c29.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashbeca122055c554548ca6ef68a66a4e2e cf5ec3650282d05c082eb0534f1b70a59f9f4bbe a9cf7ef5dfb6a58c66bc29b2a280c2253e56a28ce317d8271273ddae2008d9d5
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F36ab1cf7-da3f-4bea-abd5-3f9da5a18c29.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9126
x-amzn-requestid: 86fd10d3-f2bb-4191-93b0-3a416000fd68
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YUJHeGMqoAMFnwA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631e5562-1f8b12e10d7212353f050f3f;Sampled=0
x-amzn-remapped-date: Sun, 11 Sep 2022 21:38:42 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: WcMMN48JT7YRvUBGR6oAes5EwusRcdgrWT60xJffsOfsbkJ4_XyALg==
via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 476c2ba6d9f6cd69dbcedbd65688cbc0.cloudfront.net (CloudFront), 1.1 google
date: Sun, 11 Sep 2022 21:41:51 GMT
age: 27903
etag: "cf5ec3650282d05c082eb0534f1b70a59f9f4bbe"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| www.sensitivasarah.it/nuovo/wp-content/themes/betheme/fonts/mfn/icons.woff?31690507 | 86.107.32.80 | 200 OK | 81 kB |
URL HTTP/2www.sensitivasarah.it/nuovo/wp-content/themes/betheme/fonts/mfn/icons.woff?31690507 IP86.107.32.80:0 ASN#52030 Server Plan S.r.l.
File typeWeb Open Font Format, TrueType, length 81448, version 1.0\012- data Hash743706216bfe3fc0728d0bd15313ac92 d923ae95df3ea7676e8dc34f4de04abf2eefaaab 559a910060423ed485ddc062a9ab5318859bbfde26be3f73d9b83ac0b9dae677
GET /nuovo/wp-content/themes/betheme/fonts/mfn/icons.woff?31690507 HTTP/1.1
Host: www.sensitivasarah.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.sensitivasarah.it/nuovo/wp-content/themes/betheme/css/be.min.css?ver=26.2.1
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 28 Mar 2022 10:51:23 GMT
etag: "23c0187-13e28-5db4517dd0925"
accept-ranges: bytes
content-length: 81448
cache-control: max-age=31536000
expires: Tue, 12 Sep 2023 05:26:54 GMT
content-type: font/woff
date: Mon, 12 Sep 2022 05:26:54 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 471 B |
IP142.250.74.3:0
Hash4894843dd17150368f9e81305262c361 09c1036ec45f4da92b1749c5b0a76062d32ee681 5242d2bcde6e9f49b38e0749771de0388b9687af78be7b13a27e147b3e38684e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 12 Sep 2022 05:26:54 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 471 B |
IP142.250.74.3:0
Hash4894843dd17150368f9e81305262c361 09c1036ec45f4da92b1749c5b0a76062d32ee681 5242d2bcde6e9f49b38e0749771de0388b9687af78be7b13a27e147b3e38684e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 12 Sep 2022 05:26:54 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| www.sensitivasarah.it/quam-quo/documents.zip | 86.107.32.80 | 404 Not Found | 21 kB |
URL HTTP/2www.sensitivasarah.it/quam-quo/documents.zip IP86.107.32.80:0 ASN#52030 Server Plan S.r.l.
Hash7cdd227fe3a5baf962da9ec0231cfb7a e8af25033c00d14dd761c9650e7352d6332535ed fd27d84444f51603aa7b5467c74f52196d39dd451385b427dee1588bfebbde4f
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /quam-quo/documents.zip HTTP/1.1
Host: www.sensitivasarah.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
TE: trailers
HTTP/2 404 Not Found
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
link: <https://www.sensitivasarah.it/wp-json/>; rel="https://api.w.org/"
content-type: text/html; charset=UTF-8
date: Mon, 12 Sep 2022 05:26:53 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 471 B |
IP142.250.74.3:0
Hash4894843dd17150368f9e81305262c361 09c1036ec45f4da92b1749c5b0a76062d32ee681 5242d2bcde6e9f49b38e0749771de0388b9687af78be7b13a27e147b3e38684e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 12 Sep 2022 05:26:54 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| fonts.gstatic.com/s/lato/v23/S6u8w4BMUTPHjxsAXC-q.woff2 | 142.250.74.163 | 200 OK | 24 kB |
URL HTTP/2fonts.gstatic.com/s/lato/v23/S6u8w4BMUTPHjxsAXC-q.woff2 IP142.250.74.163:0
File typeWeb Open Font Format (Version 2), TrueType, length 24408, version 1.0\012- data Hashefee2d080d7bebdd2e0aeb2e030813a0 f8d38f9f9584e48c2e469877ebd94232265585f1 bca1d88ada544d9c80872d4da27133fab6d347361fa26e932b47ec9559088fd0
GET /s/lato/v23/S6u8w4BMUTPHjxsAXC-q.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.sensitivasarah.it
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 24408
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 05 Sep 2022 20:02:00 GMT
expires: Tue, 05 Sep 2023 20:02:00 GMT
cache-control: public, max-age=31536000
age: 552294
last-modified: Tue, 26 Apr 2022 15:50:25 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh7USSwiPGQ.woff2 | 142.250.74.163 | 200 OK | 23 kB |
URL HTTP/2fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh7USSwiPGQ.woff2 IP142.250.74.163:0
File typeWeb Open Font Format (Version 2), TrueType, length 23236, version 1.0\012- data Hash716309aab2bca045f9627f63ad79d0bf 38804233a29aaf975d557fe14e762c627bef76e0 115f6a626ca115d4ad5581b59275327e0e860b30330a52b0f785561332dd2429
GET /s/lato/v23/S6u9w4BMUTPHh7USSwiPGQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.sensitivasarah.it
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 23236
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 06 Sep 2022 17:17:25 GMT
expires: Wed, 06 Sep 2023 17:17:25 GMT
cache-control: public, max-age=31536000
age: 475769
last-modified: Tue, 26 Apr 2022 16:04:12 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/lato/v23/S6uyw4BMUTPHjx4wXg.woff2 | 142.250.74.163 | 200 OK | 24 kB |
URL HTTP/2fonts.gstatic.com/s/lato/v23/S6uyw4BMUTPHjx4wXg.woff2 IP142.250.74.163:0
File typeWeb Open Font Format (Version 2), TrueType, length 23580, version 1.0\012- data Hashe1b3b5908c9cf23dfb2b9c52b9a023ab fcd4136085f2a03481d9958cc6793a5ed98e714c 918b7dc3e2e2d015c16ce08b57bcb64d2253bafc1707658f361e72865498e537
GET /s/lato/v23/S6uyw4BMUTPHjx4wXg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.sensitivasarah.it
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 23580
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 06 Sep 2022 17:10:21 GMT
expires: Wed, 06 Sep 2023 17:10:21 GMT
cache-control: public, max-age=31536000
age: 476193
last-modified: Tue, 26 Apr 2022 15:48:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| www.iubenda.com/cookie-solution/confs/js/12435247.js | 104.66.117.233 | 200 OK | 154 B |
URL HTTP/2www.iubenda.com/cookie-solution/confs/js/12435247.js IP104.66.117.233:0
Hashf5eeaa03893a3f61ffe2f21d31448cb8 6761ad684a1e39b21de91e19f4497962029d0714 5e1d0fddabf29e114b2f21049fe9edbbf2d61aab48526f334e908212fe7d0dad
GET /cookie-solution/confs/js/12435247.js HTTP/1.1
Host: www.iubenda.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.sensitivasarah.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: application/javascript
last-modified: Thu, 30 Jun 2022 14:06:31 GMT
etag: "62bdade7-a3"
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Authorization
access-control-allow-methods: POST, PUT, DELETE, GET, OPTIONS
access-control-allow-origin: *
access-control-request-method: *
access-control-allow-credentials: true
accept-ranges: bytes
strict-transport-security: max-age=63072000
content-encoding: gzip
content-length: 154
cache-control: max-age=86400
expires: Tue, 13 Sep 2022 05:26:54 GMT
date: Mon, 12 Sep 2022 05:26:54 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 471 B |
IP142.250.74.3:0
Hash4894843dd17150368f9e81305262c361 09c1036ec45f4da92b1749c5b0a76062d32ee681 5242d2bcde6e9f49b38e0749771de0388b9687af78be7b13a27e147b3e38684e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 12 Sep 2022 05:26:54 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| cdn.iubenda.com/cs/tcf/v2/vendorlist.160.json | 104.66.117.233 | 200 OK | 37 kB |
URL HTTP/2cdn.iubenda.com/cs/tcf/v2/vendorlist.160.json IP104.66.117.233:0
File typeJSON data\012- , ASCII text, with very long lines (65536), with no line terminators Hash596e8437aa25f96d87bbeb9582f5d487 bc9cb629881c2d7472acd0b53eefc3976fcc3baf 2bbb0832c1c3548a1199150e7a97f43f78e57b0d465ae7797567b88e53b2b4b1
GET /cs/tcf/v2/vendorlist.160.json HTTP/1.1
Host: cdn.iubenda.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.sensitivasarah.it
Connection: keep-alive
Referer: https://www.sensitivasarah.it/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
content-encoding: br
content-type: application/json
etag: "631ae48f-8ee8"
last-modified: Fri, 09 Sep 2022 07:00:31 GMT
p3p: CP="DSP NOI COR", policyref="http://www.iubenda.com/w3c/p3p.xml"
content-length: 36584
cache-control: public, must-revalidate, proxy-revalidate, max-age=10800
expires: Mon, 12 Sep 2022 08:26:54 GMT
date: Mon, 12 Sep 2022 05:26:54 GMT
X-Firefox-Spdy: h2
|
|
| cdn.iubenda.com/cs/tcf/gac-vendors.json | 104.66.117.233 | 200 OK | 13 kB |
URL HTTP/2cdn.iubenda.com/cs/tcf/gac-vendors.json IP104.66.117.233:0
File typeJSON data\012- , Unicode text, UTF-8 text, with very long lines (60670), with no line terminators Hash2f1daa5bd7bd32bc0c8d6e0c6725efd4 c5bdb1d49239f2a43f75cb5fbb3cc9d0419ce0e0 03c9e178f7a42256398deec6e305d73bf2f95ae99da80d3c1dc0dd0f9340fcee
GET /cs/tcf/gac-vendors.json HTTP/1.1
Host: cdn.iubenda.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.sensitivasarah.it
Connection: keep-alive
Referer: https://www.sensitivasarah.it/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
content-encoding: br
content-type: application/json
etag: "631ae48f-3209"
last-modified: Fri, 09 Sep 2022 07:00:31 GMT
p3p: CP="DSP NOI COR", policyref="http://www.iubenda.com/w3c/p3p.xml"
content-length: 12809
cache-control: public, must-revalidate, proxy-revalidate, max-age=10800
expires: Mon, 12 Sep 2022 08:26:54 GMT
date: Mon, 12 Sep 2022 05:26:54 GMT
X-Firefox-Spdy: h2
|
|
| www.google-analytics.com/analytics.js | 142.250.74.174 | 200 OK | 20 kB |
URL HTTP/2www.google-analytics.com/analytics.js IP142.250.74.174:0
File typeASCII text, with very long lines (1325) Hash56f5d7f608e25d64207135f045f988cb 901eb59372ae330ae85e1384da93479b21ae1082 1910daea79e5a9d04829a91e432dfa56f45a80a3e14a8cf667fec73af9fd3d29
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.sensitivasarah.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20006
date: Mon, 12 Sep 2022 04:41:12 GMT
expires: Mon, 12 Sep 2022 06:41:12 GMT
cache-control: public, max-age=7200
age: 2742
last-modified: Wed, 13 Apr 2022 21:02:38 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| www.sensitivasarah.it/nuovo/wp-content/uploads/2017/04/favicon.png | 86.107.32.80 | 200 OK | 16 kB |
URL HTTP/2www.sensitivasarah.it/nuovo/wp-content/uploads/2017/04/favicon.png IP86.107.32.80:0 ASN#52030 Server Plan S.r.l.
File typePNG image data, 32 x 25, 8-bit/color RGBA, interlaced\012- data Hash53049536b2b69bc9da232f8f72645ee4 59ed71ac64d7765a9222a16f2c6cb20b2d339f36 f61f7ad2501c518be3bf094dcb43c70862b53f11a072b481f46709ade20cc3be
GET /nuovo/wp-content/uploads/2017/04/favicon.png HTTP/1.1
Host: www.sensitivasarah.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.sensitivasarah.it/quam-quo/documents.zip
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 19 Dec 2021 19:13:27 GMT
etag: "23c0b6b-3e20-5d384911c28ab"
accept-ranges: bytes
content-length: 15904
cache-control: max-age=31536000
expires: Tue, 12 Sep 2023 05:26:54 GMT
content-type: image/png
date: Mon, 12 Sep 2022 05:26:54 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.google-analytics.com/j/collect?v=1&_v=j96&a=1234040604&t=pageview&_s=1&dl=https%3A%2F%2Fwww.sensitivasarah.it%2Fquam-quo%2Fdocuments.zip&ul=en-us&de=UTF-8&dt=Pagina%20non%20trovata%20-%20Sensitiva%20Sarah&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&_u=YEBAAUABAAAAAC~&jid=211898048&gjid=1407069890&cid=391636861.1662960403&tid=UA-109814911-2&_gid=1712787792.1662960403&_r=1>m=2ou970&z=890193398 | 142.250.74.174 | 200 OK | 2 B |
URL HTTP/2www.google-analytics.com/j/collect?v=1&_v=j96&a=1234040604&t=pageview&_s=1&dl=https%3A%2F%2Fwww.sensitivasarah.it%2Fquam-quo%2Fdocuments.zip&ul=en-us&de=UTF-8&dt=Pagina%20non%20trovata%20-%20Sensitiva%20Sarah&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&_u=YEBAAUABAAAAAC~&jid=211898048&gjid=1407069890&cid=391636861.1662960403&tid=UA-109814911-2&_gid=1712787792.1662960403&_r=1>m=2ou970&z=890193398 IP142.250.74.174:0
File typeASCII text, with no line terminators Hashcc7a1e792bca8ccb1946b7a07f6dbc03 11a2757082428311f587b7664fa9840376137f80 de3246094525b21a870fc7d2a67490d0132535c6fa5993755c549f1a9d1bd8af
POST /j/collect?v=1&_v=j96&a=1234040604&t=pageview&_s=1&dl=https%3A%2F%2Fwww.sensitivasarah.it%2Fquam-quo%2Fdocuments.zip&ul=en-us&de=UTF-8&dt=Pagina%20non%20trovata%20-%20Sensitiva%20Sarah&sd=24-bit&sr=1280x1024&vp=1280x939&je=0&_u=YEBAAUABAAAAAC~&jid=211898048&gjid=1407069890&cid=391636861.1662960403&tid=UA-109814911-2&_gid=1712787792.1662960403&_r=1>m=2ou970&z=890193398 HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://www.sensitivasarah.it
Connection: keep-alive
Referer: https://www.sensitivasarah.it/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://www.sensitivasarah.it
date: Mon, 12 Sep 2022 05:26:54 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 471 B |
IP142.250.74.3:0
Hash45b55c678e2944a30a6d8160bb6e4a94 a1ac0c9681902e7d64e49bd9e146820ce2c60f4f 5a89db56a9b47aa3e426799671db9b25a42d7dd7d6881c66eca7ed37facf6bd9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 12 Sep 2022 05:26:54 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 471 B |
IP142.250.74.3:0
Hash324364e9311c1f7cb5e4068f3d947d5d ddb00dc97404cee267838983ce8bb4ae48d6647a d6cc296b22c48f9e7bb3a905dd9e899441ae7c29faec4a62e71628e1f23d61a2
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 12 Sep 2022 05:26:54 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| www.google.com/pagead/conversion_async.js | 142.250.74.164 | 200 OK | 16 kB |
URL HTTP/2www.google.com/pagead/conversion_async.js IP142.250.74.164:0
File typeASCII text, with very long lines (1623) Hash4738d969770682feba80f04bf171d65b be0e0ceb91bf5ed0c64b0f3f2cc2c99c6d4cd6b7 1daca97cf9e8078299f94c50346e45fead45bf908ca97ded912f26986c1c4e9a
GET /pagead/conversion_async.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.sensitivasarah.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
date: Mon, 12 Sep 2022 05:26:54 GMT
expires: Mon, 12 Sep 2022 05:26:54 GMT
cache-control: private, max-age=3600
content-type: text/javascript; charset=UTF-8
etag: 15579141248118922429
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 15687
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j96&tid=UA-109814911-2&cid=391636861.1662960403&jid=211898048&gjid=1407069890&_gid=1712787792.1662960403&_u=YEBAAUAAAAAAAC~&z=1729840825 | 142.251.1.156 | 200 OK | 1 B |
URL HTTP/2stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j96&tid=UA-109814911-2&cid=391636861.1662960403&jid=211898048&gjid=1407069890&_gid=1712787792.1662960403&_u=YEBAAUAAAAAAAC~&z=1729840825 IP142.251.1.156:0
File typevery short file (no magic) Hashc4ca4238a0b923820dcc509a6f75849b 356a192b7913b04c54574d18c28d46e6395428ab 6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j96&tid=UA-109814911-2&cid=391636861.1662960403&jid=211898048&gjid=1407069890&_gid=1712787792.1662960403&_u=YEBAAUAAAAAAAC~&z=1729840825 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://www.sensitivasarah.it
Connection: keep-alive
Referer: https://www.sensitivasarah.it/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://www.sensitivasarah.it
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Mon, 12 Sep 2022 05:26:54 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 1
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 472 B |
IP142.250.74.3:0
Hash437c7ccd2c357dd83d6b9a5118d4b402 e0002389b286a960b454a92aeb3d1a1e08317ff2 9a5b3bdb7765ea21d7147a0c8022198a1be6c8256fa594b53732cf59e86532b9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 12 Sep 2022 05:26:54 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 471 B |
IP142.250.74.3:0
Hash324364e9311c1f7cb5e4068f3d947d5d ddb00dc97404cee267838983ce8bb4ae48d6647a d6cc296b22c48f9e7bb3a905dd9e899441ae7c29faec4a62e71628e1f23d61a2
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 12 Sep 2022 05:26:54 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.sectigo.com/ |  104.18.32.68 | 200 OK | 471 B |
IP104.18.32.68:0
Hash1039fba96f432f0a90b81ef040c1f6a4 b8b9d0c464ba52bda4dc04e0b5c0e064df702abc 50d704a0866790227df613f60b5263eacc356106bf549c45f88d45bf8ec7dcd7
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 12 Sep 2022 05:26:54 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sat, 10 Sep 2022 11:41:09 GMT
Expires: Sat, 17 Sep 2022 11:41:08 GMT
Etag: "b8b9d0c464ba52bda4dc04e0b5c0e064df702abc"
Cache-Control: max-age=453853,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 74963b1edbf80b69-OSL
|
|
| ocsp.sectigo.com/ | 104.18.32.68 | 200 OK | 471 B |
IP104.18.32.68:0
Hash1039fba96f432f0a90b81ef040c1f6a4 b8b9d0c464ba52bda4dc04e0b5c0e064df702abc 50d704a0866790227df613f60b5263eacc356106bf549c45f88d45bf8ec7dcd7
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 12 Sep 2022 05:26:54 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sat, 10 Sep 2022 11:41:09 GMT
Expires: Sat, 17 Sep 2022 11:41:08 GMT
Etag: "b8b9d0c464ba52bda4dc04e0b5c0e064df702abc"
Cache-Control: max-age=453853,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 74963b1eddc70b06-OSL
|
|
| hits-i.iubenda.com/write?db=hits1 | 159.223.231.248 | 204 No Content | 0 B |
URL HTTP/2hits-i.iubenda.com/write?db=hits1 IP159.223.231.248:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /write?db=hits1 HTTP/1.1
Host: hits-i.iubenda.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: authorization
Referer: https://www.sensitivasarah.it/
Origin: https://www.sensitivasarah.it
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: nginx
date: Mon, 12 Sep 2022 05:26:54 GMT
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: *, authorization
access-control-max-age: 1728000
access-control-allow-credentials: true
content-length: 0
content-type: text/plain charset=UTF-8
X-Firefox-Spdy: h2
|
|
| googleads.g.doubleclick.net/pagead/viewthroughconversion/853844490/?random=1662960402896&cv=9&fst=1662960402896&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2oa970&sendb=1&ig=0&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww.sensitivasarah.it%2Fquam-quo%2Fdocuments.zip&tiba=Pagina%20non%20trovata%20-%20Sensitiva%20Sarah&auid=683146967.1662960403&hn=www.google.com&async=1&rfmt=3&fmt=4 | 142.250.74.130 | 200 OK | 1.1 kB |
URL HTTP/2googleads.g.doubleclick.net/pagead/viewthroughconversion/853844490/?random=1662960402896&cv=9&fst=1662960402896&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2oa970&sendb=1&ig=0&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww.sensitivasarah.it%2Fquam-quo%2Fdocuments.zip&tiba=Pagina%20non%20trovata%20-%20Sensitiva%20Sarah&auid=683146967.1662960403&hn=www.google.com&async=1&rfmt=3&fmt=4 IP142.250.74.130:0
File typeASCII text, with very long lines (2348), with no line terminators Hash8b409d044df3d945ceb0d9ed41b2b433 9a897c9f9f7d87a7680c85a0b22a7739ea63bfe5 9a21fe9a38784f06524317d714b2c3d790bdcb0500a09273367629bd82599096
GET /pagead/viewthroughconversion/853844490/?random=1662960402896&cv=9&fst=1662960402896&num=1&bg=ffffff&guid=ON&resp=GooglemKTybQhCsO&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2oa970&sendb=1&ig=0&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww.sensitivasarah.it%2Fquam-quo%2Fdocuments.zip&tiba=Pagina%20non%20trovata%20-%20Sensitiva%20Sarah&auid=683146967.1662960403&hn=www.google.com&async=1&rfmt=3&fmt=4 HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.sensitivasarah.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Mon, 12 Sep 2022 05:26:54 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 1062
x-xss-protection: 0
set-cookie: test_cookie=CheckForPermission; expires=Mon, 12-Sep-2022 05:41:54 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 471 B |
IP142.250.74.3:0
Hash1aebc268ef5c0a55115f6dd411a05300 ed1c99b523a86314b980707b6129b4c384c0666d f910ef4c6f9f458e807e6040b3f13f5cbaa04a742db1004e211fbf3cff83b6ec
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 12 Sep 2022 05:26:54 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| hits-i.iubenda.com/write?db=hits1 | 159.223.231.248 | 204 No Content | 0 B |
URL HTTP/2hits-i.iubenda.com/write?db=hits1 IP159.223.231.248:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /write?db=hits1 HTTP/1.1
Host: hits-i.iubenda.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Authorization: Basic aGl0czFfdTpoaXRzMV91cHdk
Content-Type: text/plain;charset=UTF-8
Content-Length: 39
Origin: https://www.sensitivasarah.it
Connection: keep-alive
Referer: https://www.sensitivasarah.it/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Mon, 12 Sep 2022 05:26:54 GMT
access-control-allow-headers: Accept, Accept-Encoding, Authorization, Content-Length, Content-Type, X-CSRF-Token, X-HTTP-Method-Override
access-control-allow-methods: DELETE, GET, OPTIONS, POST, PUT
access-control-allow-origin: https://www.sensitivasarah.it
access-control-expose-headers: Date, X-InfluxDB-Version, X-InfluxDB-Build
request-id: 8368bc0d-325b-11ed-b460-0242ac110002
x-influxdb-build: OSS
x-influxdb-version: 1.8.2
x-request-id: 8368bc0d-325b-11ed-b460-0242ac110002
X-Firefox-Spdy: h2
|
|
| www.googleadservices.com/pagead/conversion/853844490/wcm?cc=ZZ&dn=393313914295&cl=x6bWCK_A7p8BEIrEkpcD&ct_eid=2 | 142.250.74.162 | 302 Found | 0 B |
URL HTTP/2www.googleadservices.com/pagead/conversion/853844490/wcm?cc=ZZ&dn=393313914295&cl=x6bWCK_A7p8BEIrEkpcD&ct_eid=2 IP142.250.74.162:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pagead/conversion/853844490/wcm?cc=ZZ&dn=393313914295&cl=x6bWCK_A7p8BEIrEkpcD&ct_eid=2 HTTP/1.1
Host: www.googleadservices.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.sensitivasarah.it
Connection: keep-alive
Referer: https://www.sensitivasarah.it/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
location: https://www.google.no/pagead/attribution/wcm?cc=ZZ&dn=393313914295&cl=x6bWCK_A7p8BEIrEkpcD
access-control-allow-origin: https://www.sensitivasarah.it
access-control-allow-credentials: true
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Mon, 12 Sep 2022 05:26:54 GMT
server: cafe
content-length: 0
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 471 B |
IP142.250.74.3:0
Hash52538aa2b7a37b16824f656228e83ce5 a7ba272eef977c3a2d7315b6ee092ad04566e5fa 8f5ea00528714ab8652d84df2682c33de9e62e541c4bbbc78d6ed82e14445451
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 12 Sep 2022 05:26:54 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 472 B |
IP142.250.74.3:0
Hashcc16b956392846e1100a913453575c87 09e81e2f60ab04ca565b73ed9060380a2229cf30 3a3eecb77d71c4f1c3d706f33f33e8df527b3653906d0086089c2e5b45fd25e9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 12 Sep 2022 05:26:54 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 472 B |
IP142.250.74.3:0
Hashcc16b956392846e1100a913453575c87 09e81e2f60ab04ca565b73ed9060380a2229cf30 3a3eecb77d71c4f1c3d706f33f33e8df527b3653906d0086089c2e5b45fd25e9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 12 Sep 2022 05:26:54 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| www.google.no/pagead/attribution/wcm?cc=ZZ&dn=393313914295&cl=x6bWCK_A7p8BEIrEkpcD | 142.250.74.3 | 200 OK | 87 B |
URL HTTP/2www.google.no/pagead/attribution/wcm?cc=ZZ&dn=393313914295&cl=x6bWCK_A7p8BEIrEkpcD IP142.250.74.3:0
File typeJSON data\012- , ASCII text, with no line terminators Hash36d9ec9a38ee63b6e93115603d96f7a1 efb8de49ffe231ec8a1266a8ca3a97901356a846 30f732c37c76fae3bcf6bcb7c39492d86abc6c3fbf53dadc4533f89df05c71b2
GET /pagead/attribution/wcm?cc=ZZ&dn=393313914295&cl=x6bWCK_A7p8BEIrEkpcD HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Referer: https://www.sensitivasarah.it/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-type: application/json; charset=UTF-8
access-control-allow-origin: null
access-control-allow-credentials: true
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Mon, 12 Sep 2022 05:26:54 GMT
server: cafe
cache-control: private
content-length: 87
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| www.google.no/pagead/1p-user-list/853844490/?random=1662960402896&cv=9&fst=1662958800000&num=1&bg=ffffff&guid=ON&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2oa970&sendb=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww.sensitivasarah.it%2Fquam-quo%2Fdocuments.zip&tiba=Pagina%20non%20trovata%20-%20Sensitiva%20Sarah&async=1&fmt=3&is_vtc=1&random=1620060733&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y | 142.250.74.3 | 200 OK | 42 B |
URL HTTP/2www.google.no/pagead/1p-user-list/853844490/?random=1662960402896&cv=9&fst=1662958800000&num=1&bg=ffffff&guid=ON&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2oa970&sendb=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww.sensitivasarah.it%2Fquam-quo%2Fdocuments.zip&tiba=Pagina%20non%20trovata%20-%20Sensitiva%20Sarah&async=1&fmt=3&is_vtc=1&random=1620060733&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y IP142.250.74.3:0
File typeGIF image data, version 89a, 1 x 1\012- data Hashd89746888da2d9510b64a9f031eaecd5 d5fceb6532643d0d84ffe09c40c481ecdf59e15a ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /pagead/1p-user-list/853844490/?random=1662960402896&cv=9&fst=1662958800000&num=1&bg=ffffff&guid=ON&u_h=1024&u_w=1280&u_ah=1002&u_aw=1280&u_cd=24&u_his=1&u_tz=0&u_java=false&u_nplug=0&u_nmime=0>m=2oa970&sendb=1&data=event%3Dgtag.config&frm=0&url=https%3A%2F%2Fwww.sensitivasarah.it%2Fquam-quo%2Fdocuments.zip&tiba=Pagina%20non%20trovata%20-%20Sensitiva%20Sarah&async=1&fmt=3&is_vtc=1&random=1620060733&resp=GooglemKTybQhCsO&rmt_tld=1&ipr=y HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.sensitivasarah.it/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Mon, 12 Sep 2022 05:26:54 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 472 B |
IP142.250.74.3:0
Hashcc16b956392846e1100a913453575c87 09e81e2f60ab04ca565b73ed9060380a2229cf30 3a3eecb77d71c4f1c3d706f33f33e8df527b3653906d0086089c2e5b45fd25e9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 12 Sep 2022 05:26:54 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| fonts.googleapis.com/css?family=Lato%3A1%2C100%2C300%2C300italic%2C400%2C400italic%2C700%2C800%2C900&display=swap&ver=dd43f6a3c6eeea819153a4913d0293ae | 142.250.74.10 | 200 OK | 0 B |
URL HTTP/2fonts.googleapis.com/css?family=Lato%3A1%2C100%2C300%2C300italic%2C400%2C400italic%2C700%2C800%2C900&display=swap&ver=dd43f6a3c6eeea819153a4913d0293ae IP142.250.74.10:0
GET /css?family=Lato%3A1%2C100%2C300%2C300italic%2C400%2C400italic%2C700%2C800%2C900&display=swap&ver=dd43f6a3c6eeea819153a4913d0293ae HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.sensitivasarah.it/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Mon, 12 Sep 2022 05:26:53 GMT
date: Mon, 12 Sep 2022 05:26:53 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| www.sensitivasarah.it/nuovo/wp-includes/js/jquery/jquery.min.js?ver=3.6.0 | 86.107.32.80 | 200 OK | 0 B |
URL HTTP/2www.sensitivasarah.it/nuovo/wp-includes/js/jquery/jquery.min.js?ver=3.6.0 IP86.107.32.80:0 ASN#52030 Server Plan S.r.l.
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /nuovo/wp-includes/js/jquery/jquery.min.js?ver=3.6.0 HTTP/1.1
Host: www.sensitivasarah.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.sensitivasarah.it/quam-quo/documents.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 26 Nov 2021 09:24:18 GMT
etag: "23e0689-15db1-5d1ada7c7f480"
accept-ranges: bytes
content-length: 89521
cache-control: max-age=15552000
expires: Sat, 11 Mar 2023 05:26:53 GMT
content-type: application/javascript
date: Mon, 12 Sep 2022 05:26:53 GMT
server: Apache
X-Firefox-Spdy: h2
|
|
| www.sensitivasarah.it/nuovo/wp-content/themes/betheme/js/plugins.min.js?ver=26.2.1 | 86.107.32.80 | 200 OK | 0 B |
URL HTTP/2www.sensitivasarah.it/nuovo/wp-content/themes/betheme/js/plugins.min.js?ver=26.2.1 IP86.107.32.80:0 ASN#52030 Server Plan S.r.l.
GET /nuovo/wp-content/themes/betheme/js/plugins.min.js?ver=26.2.1 HTTP/1.1
Host: www.sensitivasarah.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.sensitivasarah.it/quam-quo/documents.zip
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 28 Mar 2022 10:51:23 GMT
etag: "23c041e-30a83-5db4517dd99ad"
accept-ranges: bytes
content-length: 199299
cache-control: max-age=15552000
expires: Sat, 11 Mar 2023 05:26:53 GMT
content-type: application/javascript
date: Mon, 12 Sep 2022 05:26:53 GMT
server: Apache
X-Firefox-Spdy: h2
|
|