r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 3bbb845b153026fc5332dd4506585b57
3cad200fac28fd00f34ce6ef79373e661e188743
6035871c0de6ff2d120921461207cfa32bc286e1fe78849ce74815ffbb9ff950
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6035871C0DE6FF2D120921461207CFA32BC286E1FE78849CE74815FFBB9FF950"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13523
Expires: Fri, 02 Dec 2022 08:26:10 GMT
Date: Fri, 02 Dec 2022 04:40:47 GMT
Connection: keep-alive
altagna-trasporti.com/
200 OK 5.1 kB IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1327), with CRLF, LF line terminators
Hash 380e4f2b1c379c9da8d12a11888d1098
f5239fd2a70c9fede0020e48b1e9e5a6312d6fcc
e71457bf00c215762c43dfc1670941d430c792b99a514371430c7ef2d5638363
Analyzer Verdict Alert fortinet Malware
GET / HTTP/1.1
Host: altagna-trasporti.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
date: Fri, 02 Dec 2022 04:40:47 GMT
content-type: text/html; charset=UTF-8
transfer-encoding: chunked
server: Apache
x-powered-by: PHP/5.4
link: <http://altagna-trasporti.com/wp-json/>; rel="https://api.w.org/", <http://altagna-trasporti.com/>; rel=shortlink
vary: Accept-Encoding
content-encoding: gzip
x-iplb-request-id: 5B5A2A9A:7EA5_D5BA2128:0050_638981CF_36AFA:14A8
x-iplb-instance: 29688
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 55b4c61a1e99001307750e3647fe1102
7559f9f6770b7d3f45b723167062096312641e08
39f6bb64420bcfc8f0b010168fd35b67732984cd0698409f04d5ae40410422aa
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "39F6BB64420BCFC8F0B010168FD35B67732984CD0698409F04D5AE40410422AA"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11510
Expires: Fri, 02 Dec 2022 07:52:37 GMT
Date: Fri, 02 Dec 2022 04:40:47 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: grQo7pelQbUr/a6vMChgzENdYmks+sKW8rsTlrxfxrsxWHfS2Ri0MTIpytHh1xXhC76BLc2N5hc=
x-amz-request-id: 3Z3ZR0SACY57YW9Q
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 02 Dec 2022 03:46:33 GMT
age: 3254
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 0c748388899e8a8d3680355da2ea5020
903c620cd137613daafb0da0508c37b2f4a67212
39eab80e022a9a1732872d9926b0ace80f818ec5c535e36a18b539ea63786fb2
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2333
Cache-Control: max-age=109758
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 04:40:47 GMT
Etag: "63888270-1d7"
Expires: Sat, 03 Dec 2022 11:10:05 GMT
Last-Modified: Thu, 01 Dec 2022 10:31:12 GMT
Server: ECS (ska/F715)
X-Cache: HIT
Content-Length: 471
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 14cd9a0afb6ba9a763651d5112760d1e
75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Retry-After, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Fri, 02 Dec 2022 04:19:50 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 1258
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 02 Dec 2022 04:40:48 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ajax.googleapis.com/ajax/libs/jqueryui/1.8.2/themes/smoothness/jquery-ui.css?ver=4.4.29
200 OK 5.9 kB URL HTTP/1.1 ajax.googleapis.com/ajax/libs/jqueryui/1.8.2/themes/smoothness/jquery-ui.css?ver=4.4.29
IP
File type ASCII text, with very long lines (1398)
Hash a4c64be3878ceb36796c1a87b3173c3a
37febc085eab2a582388c75954c6b39b3fcebdeb
c3f85a3d153d17f7fb99133915101d9fa1510cf8f1a426fc69875fef78487bb8
GET /ajax/libs/jqueryui/1.8.2/themes/smoothness/jquery-ui.css?ver=4.4.29 HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://altagna-trasporti.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="hosted-libraries-pushers"
Report-To: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
Timing-Allow-Origin: *
Content-Length: 5862
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Fri, 25 Nov 2022 16:07:00 GMT
Expires: Sat, 25 Nov 2023 16:07:00 GMT
Cache-Control: public, max-age=31536000, stale-while-revalidate=2592000
Age: 563628
Last-Modified: Tue, 03 Mar 2020 19:15:00 GMT
Content-Type: text/css; charset=UTF-8
altagna-trasporti.com/wp-content/plugins/kiwi-logo-carousel/third-party/jquery.bxslider/jquery.bxslider.css?ver=4.4.29
200 OK 1.1 kB URL HTTP/1.1 altagna-trasporti.com/wp-content/plugins/kiwi-logo-carousel/third-party/jquery.bxslider/jquery.bxslider.css?ver=4.4.29
IP
Hash 00fa220af8984c160fe66f9bb4cfc618
b8cf778a3cad7af963cfc003d06856376e62573f
c4dc76cef28e8a350b00b7dc4b5d1412f47936c786b47b483c3e2060bf867688
GET /wp-content/plugins/kiwi-logo-carousel/third-party/jquery.bxslider/jquery.bxslider.css?ver=4.4.29 HTTP/1.1
Host: altagna-trasporti.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://altagna-trasporti.com/
HTTP/1.1 200 OK
date: Fri, 02 Dec 2022 04:40:48 GMT
content-type: text/css
content-length: 1120
server: Apache
last-modified: Fri, 27 Nov 2015 15:20:44 GMT
accept-ranges: bytes
cache-control: max-age=900
expires: Fri, 02 Dec 2022 04:55:48 GMT
vary: Accept-Encoding
content-encoding: gzip
x-iplb-request-id: 5B5A2A9A:7EA5_D5BA2128:0050_638981CF_36AFD:14A8
x-iplb-instance: 29688
fonts.googleapis.com/css?family=Crimson+Text%3Aregular%2Citalic%2C700%7COswald%3Aregular%2C700%26subset%3Dlatin%2C
200 OK 709 B URL HTTP/1.1 fonts.googleapis.com/css?family=Crimson+Text%3Aregular%2Citalic%2C700%7COswald%3Aregular%2C700%26subset%3Dlatin%2C
IP
Hash 21c69f50e6a5d7e3a66f2dc105801a17
2646611e42eea1605480ae1f7cd31d69bc5524f4
26a507b5418e33f257e04f41d272dfce4b469f91677f52f6804fb3d6ce806d98
GET /css?family=Crimson+Text%3Aregular%2Citalic%2C700%7COswald%3Aregular%2C700%26subset%3Dlatin%2C HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://altagna-trasporti.com/
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Link: <http://fonts.gstatic.com>; rel=preconnect; crossorigin
Expires: Fri, 02 Dec 2022 04:40:48 GMT
Date: Fri, 02 Dec 2022 04:40:48 GMT
Cache-Control: private, max-age=86400
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin-allow-popups
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: ESF
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
www.google.com/recaptcha/api.js?ver=7.5&onload=ccfRecaptchaOnload&render=explicit
200 OK 577 B URL HTTP/1.1 www.google.com/recaptcha/api.js?ver=7.5&onload=ccfRecaptchaOnload&render=explicit
IP
File type ASCII text, with very long lines (912), with no line terminators
Hash eb51c0d5d223512261ea0695c4fc4079
8e89b18b1b2f69a0597f61d804aad0512d528876
079e5a49310edfaa03be83333ac3c2650128fa944c02b3c00515ac1b0701293c
GET /recaptcha/api.js?ver=7.5&onload=ccfRecaptchaOnload&render=explicit HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://altagna-trasporti.com/
HTTP/1.1 200 OK
Expires: Fri, 02 Dec 2022 04:40:48 GMT
Date: Fri, 02 Dec 2022 04:40:48 GMT
Cache-Control: private, max-age=300
Content-Type: text/javascript; charset=UTF-8
Cross-Origin-Resource-Policy: cross-origin
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: frame-ancestors 'self'
X-XSS-Protection: 1; mode=block
Content-Length: 577
Server: GSE
altagna-trasporti.com/wp-content/plugins/kiwi-logo-carousel/custom-styles.css?ver=4.4.29
200 OK 831 B URL HTTP/1.1 altagna-trasporti.com/wp-content/plugins/kiwi-logo-carousel/custom-styles.css?ver=4.4.29
IP
File type ASCII text, with CRLF line terminators
Hash 78b4952147e8999bfcb53c082d9ee85e
349697646abbe33422d1abc80205f54d379f3ac8
85cffaeb2d59626261cd4168b2aabb5b232c1bfb0b4cd2b26494ff7a54e2466c
GET /wp-content/plugins/kiwi-logo-carousel/custom-styles.css?ver=4.4.29 HTTP/1.1
Host: altagna-trasporti.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://altagna-trasporti.com/
HTTP/1.1 200 OK
date: Fri, 02 Dec 2022 04:40:48 GMT
content-type: text/css
content-length: 831
server: Apache
last-modified: Fri, 27 Nov 2015 15:20:44 GMT
accept-ranges: bytes
cache-control: max-age=900
expires: Fri, 02 Dec 2022 04:55:48 GMT
vary: Accept-Encoding
content-encoding: gzip
x-iplb-request-id: 5B5A2A9A:E46C_D5BA2128:0050_638981D0_37F6C:2B75D
x-iplb-instance: 29575
altagna-trasporti.com/wp-content/themes/silvia/assets/css/plugins.min.css?ver=4.4.29
200 OK 8.3 kB URL HTTP/1.1 altagna-trasporti.com/wp-content/themes/silvia/assets/css/plugins.min.css?ver=4.4.29
IP
File type ASCII text, with very long lines (35352), with no line terminators
Hash c104034673ae18e4f22d349812d49427
919b8cfeeb5997e4c26ee2889ed5d2b36b2959bc
d4480c1c21b1504534caa529ea4e99372721da753c87717ab0839675593df738
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/silvia/assets/css/plugins.min.css?ver=4.4.29 HTTP/1.1
Host: altagna-trasporti.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://altagna-trasporti.com/
HTTP/1.1 200 OK
date: Fri, 02 Dec 2022 04:40:48 GMT
content-type: text/css
content-length: 8250
server: Apache
last-modified: Tue, 12 Jan 2016 15:12:29 GMT
accept-ranges: bytes
cache-control: max-age=900
expires: Fri, 02 Dec 2022 04:55:48 GMT
vary: Accept-Encoding
content-encoding: gzip
x-iplb-request-id: 5B5A2A9A:3D2B_D5BA2128:0050_638981D0_27994:2B75C
x-iplb-instance: 29575
altagna-trasporti.com/wp-content/themes/silvia/style.min.css?ver=4.4.29
200 OK 7.3 kB URL HTTP/1.1 altagna-trasporti.com/wp-content/themes/silvia/style.min.css?ver=4.4.29
IP
File type Unicode text, UTF-8 text, with very long lines (28829)
Hash 84975f33272148dd9333d4e86055cc71
0a5a8b07f91fc428b7368421463508e5f0d2a1fb
9e0a5504ce1cdb0e68c3eac1e673793f594aba3ce4331087f10a12167a5e3cea
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/silvia/style.min.css?ver=4.4.29 HTTP/1.1
Host: altagna-trasporti.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://altagna-trasporti.com/
HTTP/1.1 200 OK
date: Fri, 02 Dec 2022 04:40:48 GMT
content-type: text/css
content-length: 7285
server: Apache
last-modified: Tue, 12 Jan 2016 15:12:29 GMT
accept-ranges: bytes
cache-control: max-age=900
expires: Fri, 02 Dec 2022 04:55:48 GMT
vary: Accept-Encoding
content-encoding: gzip
x-iplb-request-id: 5B5A2A9A:5ED8_D5BA2128:0050_638981D0_5F235:2FD78
x-iplb-instance: 29534
altagna-trasporti.com/wp-includes/js/jquery/ui/core.min.js?ver=1.11.4
200 OK 1.8 kB URL HTTP/1.1 altagna-trasporti.com/wp-includes/js/jquery/ui/core.min.js?ver=1.11.4
IP
File type ASCII text, with very long lines (3704)
Hash 8681c8c59fe450daeacc2f499e351dfe
1bedefb4c8fa62628816eaeea85677d637a6e4e0
d2160a6f66510d16512fd1fd387aee7d3763f0b4799273125faa777128dc5430
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/jquery/ui/core.min.js?ver=1.11.4 HTTP/1.1
Host: altagna-trasporti.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://altagna-trasporti.com/
HTTP/1.1 200 OK
date: Fri, 02 Dec 2022 04:40:48 GMT
content-type: application/javascript
content-length: 1811
server: Apache
last-modified: Thu, 13 May 2021 02:26:02 GMT
accept-ranges: bytes
cache-control: max-age=900
expires: Fri, 02 Dec 2022 04:55:48 GMT
vary: Accept-Encoding
content-encoding: gzip
x-iplb-request-id: 5B5A2A9A:7EA5_D5BA2128:0050_638981D0_36B07:14A8
x-iplb-instance: 29688
altagna-trasporti.com/wp-includes/js/jquery/ui/datepicker.min.js?ver=1.11.4
200 OK 11 kB URL HTTP/1.1 altagna-trasporti.com/wp-includes/js/jquery/ui/datepicker.min.js?ver=1.11.4
IP
File type ASCII text, with very long lines (35951)
Hash a5a458d0df3b4eb65571b6a97aec42e0
adec56bbaa570ac416acb4859c4ffa085a2b79a8
d1cfe94c8575c3968984d9c85c43576d6c440dedf8f811472e067a1980b9cfbd
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/jquery/ui/datepicker.min.js?ver=1.11.4 HTTP/1.1
Host: altagna-trasporti.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://altagna-trasporti.com/
HTTP/1.1 200 OK
date: Fri, 02 Dec 2022 04:40:48 GMT
content-type: application/javascript
content-length: 10794
server: Apache
last-modified: Thu, 13 May 2021 02:26:02 GMT
accept-ranges: bytes
cache-control: max-age=900
expires: Fri, 02 Dec 2022 04:55:48 GMT
vary: Accept-Encoding
content-encoding: gzip
x-iplb-request-id: 5B5A2A9A:71F5_D5BA2128:0050_638981D0_1C8F5:8D79
x-iplb-instance: 29574
altagna-trasporti.com/wp-includes/js/underscore.min.js?ver=1.6.0
200 OK 5.0 kB URL HTTP/1.1 altagna-trasporti.com/wp-includes/js/underscore.min.js?ver=1.6.0
IP
File type ASCII text, with very long lines (14427)
Hash b8ca9d07c527695631dd74b05e2e4c3a
1fcd30a0749f9f23f78e7d50cba1a7ffe08b16bf
596370a485a0a402851c1a1fb3c3bd98817a65cfba50997fb5d966f92e65fbab
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/underscore.min.js?ver=1.6.0 HTTP/1.1
Host: altagna-trasporti.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://altagna-trasporti.com/
HTTP/1.1 200 OK
date: Fri, 02 Dec 2022 04:40:48 GMT
content-type: application/javascript
content-length: 5039
server: Apache
last-modified: Tue, 12 May 2015 09:46:41 GMT
accept-ranges: bytes
cache-control: max-age=900
expires: Fri, 02 Dec 2022 04:55:48 GMT
vary: Accept-Encoding
content-encoding: gzip
x-iplb-request-id: 5B5A2A9A:B353_D5BA2128:0050_638981D0_527AE:11C8
x-iplb-instance: 29690
altagna-trasporti.com/wp-content/plugins/custom-contact-forms/assets/build/js/form.min.js?ver=7.5
200 OK 3.1 kB URL HTTP/1.1 altagna-trasporti.com/wp-content/plugins/custom-contact-forms/assets/build/js/form.min.js?ver=7.5
IP
File type ASCII text, with very long lines (10733), with no line terminators
Hash 1f86dab2e59b0878f18d7777a0435f75
ad592cd68e758f11c1807a9a16c561d10e5626a3
b47845b0b05eefcfb29a5abf59d1d2e4d2c146cc0bac7196df59efd9dcd9d0a1
GET /wp-content/plugins/custom-contact-forms/assets/build/js/form.min.js?ver=7.5 HTTP/1.1
Host: altagna-trasporti.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://altagna-trasporti.com/
HTTP/1.1 200 OK
date: Fri, 02 Dec 2022 04:40:48 GMT
content-type: application/javascript
content-length: 3147
server: Apache
last-modified: Tue, 09 Feb 2016 15:19:19 GMT
accept-ranges: bytes
cache-control: max-age=900
expires: Fri, 02 Dec 2022 04:55:48 GMT
vary: Accept-Encoding
content-encoding: gzip
x-iplb-request-id: 5B5A2A9A:E46C_D5BA2128:0050_638981D0_37F6E:2B75D
x-iplb-instance: 29575
altagna-trasporti.com/wp-content/themes/silvia/assets/js/silvia.min.js
200 OK 10 kB URL HTTP/1.1 altagna-trasporti.com/wp-content/themes/silvia/assets/js/silvia.min.js
IP
File type HTML document, ASCII text, with very long lines (29622), with no line terminators
Hash 03911a2c3873b034ea9e7beb82c6601c
dccd9f9122725a9b07dc37931d6aaf8a3f430ab5
0fcb487fe189d6e9a2ce0f8b66c4efe8dca50c6cf268306f3a2fe1fdeb8c180e
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/silvia/assets/js/silvia.min.js HTTP/1.1
Host: altagna-trasporti.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://altagna-trasporti.com/
HTTP/1.1 200 OK
date: Fri, 02 Dec 2022 04:40:48 GMT
content-type: application/javascript
content-length: 10094
server: Apache
last-modified: Tue, 12 Jan 2016 15:12:29 GMT
accept-ranges: bytes
cache-control: max-age=900
expires: Fri, 02 Dec 2022 04:55:48 GMT
vary: Accept-Encoding
content-encoding: gzip
x-iplb-request-id: 5B5A2A9A:3D2B_D5BA2128:0050_638981D0_27995:2B75C
x-iplb-instance: 29575
altagna-trasporti.com/wp-includes/js/wp-embed.min.js?ver=4.4.29
200 OK 733 B URL HTTP/1.1 altagna-trasporti.com/wp-includes/js/wp-embed.min.js?ver=4.4.29
IP
File type ASCII text, with very long lines (1384), with no line terminators
Hash b33ec51a91e80b6ec465ae6b3f7a7948
41dd8a38051c338609e872b50f52341ae66ca29a
b34255b006c8b1f1d04237f2a3727151ff4ae3b7123e925c9d681fd22a0d2f01
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/wp-embed.min.js?ver=4.4.29 HTTP/1.1
Host: altagna-trasporti.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://altagna-trasporti.com/
HTTP/1.1 200 OK
date: Fri, 02 Dec 2022 04:40:48 GMT
content-type: application/javascript
content-length: 733
server: Apache
last-modified: Thu, 13 May 2021 02:26:02 GMT
accept-ranges: bytes
cache-control: max-age=900
expires: Fri, 02 Dec 2022 04:55:48 GMT
vary: Accept-Encoding
content-encoding: gzip
x-iplb-request-id: 5B5A2A9A:5ED8_D5BA2128:0050_638981D0_5F236:2FD78
x-iplb-instance: 29534
altagna-trasporti.com/wp-content/plugins/kiwi-logo-carousel/third-party/jquery.bxslider/jquery.bxslider.js?ver=4.4.29
200 OK 12 kB URL HTTP/1.1 altagna-trasporti.com/wp-content/plugins/kiwi-logo-carousel/third-party/jquery.bxslider/jquery.bxslider.js?ver=4.4.29
IP
Hash 7f8be9fa874e129cadb70de04c0d6e11
5b819840e38a393ab99d9360cfd92a9954b4daa9
ebe7ac89233a347f9f9a5960934f1a7f734ca4bd79590d453e39ce563d76cb57
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/kiwi-logo-carousel/third-party/jquery.bxslider/jquery.bxslider.js?ver=4.4.29 HTTP/1.1
Host: altagna-trasporti.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://altagna-trasporti.com/
HTTP/1.1 200 OK
date: Fri, 02 Dec 2022 04:40:48 GMT
content-type: application/javascript
content-length: 11725
server: Apache
last-modified: Fri, 27 Nov 2015 15:20:44 GMT
accept-ranges: bytes
cache-control: max-age=900
expires: Fri, 02 Dec 2022 04:55:48 GMT
vary: Accept-Encoding
content-encoding: gzip
x-iplb-request-id: 5B5A2A9A:7EA5_D5BA2128:0050_638981D0_36B08:14A8
x-iplb-instance: 29688
altagna-trasporti.com/wp-content/plugins/siteorigin-panels/css/front.css?ver=2.2.2
200 OK 234 B URL HTTP/1.1 altagna-trasporti.com/wp-content/plugins/siteorigin-panels/css/front.css?ver=2.2.2
IP
Hash 8f4e155ebde5163db34779e3fcf35131
4f598791819cbb17458c56649d9f90ea16c6d328
7835e9fb993f1f8daaeb48a91e721f287c3ce06623f28e9656c41a9140af7250
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/siteorigin-panels/css/front.css?ver=2.2.2 HTTP/1.1
Host: altagna-trasporti.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://altagna-trasporti.com/
HTTP/1.1 200 OK
date: Fri, 02 Dec 2022 04:40:48 GMT
content-type: text/css
content-length: 234
server: Apache
last-modified: Tue, 12 Jan 2016 13:41:22 GMT
accept-ranges: bytes
cache-control: max-age=900
expires: Fri, 02 Dec 2022 04:55:48 GMT
vary: Accept-Encoding
content-encoding: gzip
x-iplb-request-id: 5B5A2A9A:71F5_D5BA2128:0050_638981D0_1C8F6:8D79
x-iplb-instance: 29574
altagna-trasporti.com/wp-content/plugins/custom-contact-forms/assets/build/css/form.min.css?ver=7.5
200 OK 1.3 kB URL HTTP/1.1 altagna-trasporti.com/wp-content/plugins/custom-contact-forms/assets/build/css/form.min.css?ver=7.5
IP
File type ASCII text, with very long lines (6880), with no line terminators
Hash 6324a684af43c157f26355e6e75638ce
720fcc0a37d3eac7f07d4783f18f0ae7ea1c4bce
de8b284b675be0eaae7c0c8d7ca66d95e26abba9d4f35f38854fdabea11150c7
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/custom-contact-forms/assets/build/css/form.min.css?ver=7.5 HTTP/1.1
Host: altagna-trasporti.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://altagna-trasporti.com/
HTTP/1.1 200 OK
date: Fri, 02 Dec 2022 04:40:48 GMT
content-type: text/css
content-length: 1263
server: Apache
last-modified: Tue, 09 Feb 2016 15:19:19 GMT
accept-ranges: bytes
cache-control: max-age=900
expires: Fri, 02 Dec 2022 04:55:48 GMT
vary: Accept-Encoding
content-encoding: gzip
x-iplb-request-id: 5B5A2A9A:B353_D5BA2128:0050_638981D0_527AF:11C8
x-iplb-instance: 29690
altagna-trasporti.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=1.2.1
200 OK 3.1 kB URL HTTP/1.1 altagna-trasporti.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=1.2.1
IP
File type ASCII text, with very long lines (7085), with CRLF line terminators
Hash be877782551a115e6da253d62cc3a6b2
b06a56238dcc28a6343c66d41aab3ad12a9c4f08
aba99fe4bef6b2ef9f9f0824e9dbdf7dede23e22a98b2305820c1f25a37e7380
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=1.2.1 HTTP/1.1
Host: altagna-trasporti.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://altagna-trasporti.com/
HTTP/1.1 200 OK
date: Fri, 02 Dec 2022 04:40:48 GMT
content-type: application/javascript
content-length: 3068
server: Apache
last-modified: Wed, 10 Dec 2014 10:39:44 GMT
accept-ranges: bytes
cache-control: max-age=900
expires: Fri, 02 Dec 2022 04:55:48 GMT
vary: Accept-Encoding
content-encoding: gzip
x-iplb-request-id: 5B5A2A9A:3D2B_D5BA2128:0050_638981D0_27998:2B75C
x-iplb-instance: 29575
altagna-trasporti.com/wp-includes/js/jquery/jquery.js?ver=1.11.3
200 OK 33 kB URL HTTP/1.1 altagna-trasporti.com/wp-includes/js/jquery/jquery.js?ver=1.11.3
IP
File type ASCII text, with very long lines (32038)
Hash b2d13b1887e9f9d3121fdfdba89bd0b0
c02098f4baf85cb6652f47e3238da902aa1e7f08
a7b8e0ce0cd0df6fad936a7bb41444eb4f56e43dad662b4cadc351a666d9e562
GET /wp-includes/js/jquery/jquery.js?ver=1.11.3 HTTP/1.1
Host: altagna-trasporti.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://altagna-trasporti.com/
HTTP/1.1 200 OK
date: Fri, 02 Dec 2022 04:40:48 GMT
content-type: application/javascript
content-length: 33285
server: Apache
last-modified: Mon, 09 Nov 2015 14:26:26 GMT
accept-ranges: bytes
cache-control: max-age=900
expires: Fri, 02 Dec 2022 04:55:48 GMT
vary: Accept-Encoding
content-encoding: gzip
x-iplb-request-id: 5B5A2A9A:E46C_D5BA2128:0050_638981D0_37F70:2B75D
x-iplb-instance: 29575
altagna-trasporti.com/wp-content/uploads/2015/11/12239578_10207004365019950_2589722760803150357_n-150x150.jpg
200 OK 8.1 kB URL HTTP/1.1 altagna-trasporti.com/wp-content/uploads/2015/11/12239578_10207004365019950_2589722760803150357_n-150x150.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 150x150, components 3\012- data
Hash b2642794ccac4310f1868002e8f2760c
6efa73e111c8aaab1f540ba6434f58653b3fd0da
69afdce9053fa9420ca817eb23c29d6b26d8e97808e8103407d83dca60835127
GET /wp-content/uploads/2015/11/12239578_10207004365019950_2589722760803150357_n-150x150.jpg HTTP/1.1
Host: altagna-trasporti.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://altagna-trasporti.com/
HTTP/1.1 200 OK
date: Fri, 02 Dec 2022 04:40:48 GMT
content-type: image/jpeg
content-length: 8089
server: Apache
last-modified: Fri, 27 Nov 2015 14:19:13 GMT
accept-ranges: bytes
cache-control: max-age=900
expires: Fri, 02 Dec 2022 04:55:48 GMT
x-iplb-request-id: 5B5A2A9A:3D2B_D5BA2128:0050_638981D0_27999:2B75C
x-iplb-instance: 29575
altagna-trasporti.com/wp-content/uploads/2015/11/12063791_10204597107548412_1552140005776755473_n-150x150.jpg
200 OK 7.7 kB URL HTTP/1.1 altagna-trasporti.com/wp-content/uploads/2015/11/12063791_10204597107548412_1552140005776755473_n-150x150.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 150x150, components 3\012- data
Hash d6114704f856956f7fb7d881dde42e50
cc53395052d2c164c45ddea4283486ae58f7708b
3d8d3fa54906213a75e4257a4aa82c6059028c485a443cca8015469430174458
GET /wp-content/uploads/2015/11/12063791_10204597107548412_1552140005776755473_n-150x150.jpg HTTP/1.1
Host: altagna-trasporti.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://altagna-trasporti.com/
HTTP/1.1 200 OK
date: Fri, 02 Dec 2022 04:40:48 GMT
content-type: image/jpeg
content-length: 7653
server: Apache
last-modified: Fri, 27 Nov 2015 14:19:04 GMT
accept-ranges: bytes
cache-control: max-age=900
expires: Fri, 02 Dec 2022 04:55:48 GMT
x-iplb-request-id: 5B5A2A9A:5ED8_D5BA2128:0050_638981D0_5F239:2FD78
x-iplb-instance: 29534
altagna-trasporti.com/wp-content/uploads/2015/11/12195757_911440858910991_3602915226813613798_n-150x150.jpg
200 OK 9.1 kB URL HTTP/1.1 altagna-trasporti.com/wp-content/uploads/2015/11/12195757_911440858910991_3602915226813613798_n-150x150.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 150x150, components 3\012- data
Hash 3ceea8d7ee5e56bd0cc37243b8daa451
adc5ae8902728908b154d947955848c651193e3c
c297488786eb384102b4119240c2c5d5638ab8c0b009bb5c636a3544027a3f48
GET /wp-content/uploads/2015/11/12195757_911440858910991_3602915226813613798_n-150x150.jpg HTTP/1.1
Host: altagna-trasporti.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://altagna-trasporti.com/
HTTP/1.1 200 OK
date: Fri, 02 Dec 2022 04:40:48 GMT
content-type: image/jpeg
content-length: 9051
server: Apache
last-modified: Fri, 27 Nov 2015 14:19:12 GMT
accept-ranges: bytes
cache-control: max-age=900
expires: Fri, 02 Dec 2022 04:55:48 GMT
x-iplb-request-id: 5B5A2A9A:71F5_D5BA2128:0050_638981D0_1C8F7:8D79
x-iplb-instance: 29574
altagna-trasporti.com/wp-content/uploads/2015/11/12191025_911444965577247_2006506109876819110_n-150x150.jpg
200 OK 8.4 kB URL HTTP/1.1 altagna-trasporti.com/wp-content/uploads/2015/11/12191025_911444965577247_2006506109876819110_n-150x150.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 150x150, components 3\012- data
Hash 8cb66fa50475e852188bd5b5c9fb219b
9c81afa3c2ed9caa89d392e0678df2e9ba9325dc
92897a8c8a659aa38f540b50fbbaedb54c9046141103224d0d079feaab41635f
GET /wp-content/uploads/2015/11/12191025_911444965577247_2006506109876819110_n-150x150.jpg HTTP/1.1
Host: altagna-trasporti.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://altagna-trasporti.com/
HTTP/1.1 200 OK
date: Fri, 02 Dec 2022 04:40:48 GMT
content-type: image/jpeg
content-length: 8408
server: Apache
last-modified: Fri, 27 Nov 2015 14:19:09 GMT
accept-ranges: bytes
cache-control: max-age=900
expires: Fri, 02 Dec 2022 04:55:48 GMT
x-iplb-request-id: 5B5A2A9A:B353_D5BA2128:0050_638981D0_527B2:11C8
x-iplb-instance: 29690
fonts.gstatic.com/s/crimsontext/v19/wlp2gwHKFkZgtmSR3NB0oRJfbwhT.woff2
200 OK 25 kB URL HTTP/1.1 fonts.gstatic.com/s/crimsontext/v19/wlp2gwHKFkZgtmSR3NB0oRJfbwhT.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 25184, version 1.0\012- data
Hash 23eec75ba54d389a0188abbb596b7614
daa4672ad515a108325f52116e9a49aab8cdd5fa
538c7067580f457dd3dd98ebaabeb19405c12bdd01674d3db8fd9948ee73c862
GET /s/crimsontext/v19/wlp2gwHKFkZgtmSR3NB0oRJfbwhT.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://altagna-trasporti.com
Connection: keep-alive
Referer: http://fonts.googleapis.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 25184
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Wed, 30 Nov 2022 07:53:24 GMT
Expires: Thu, 30 Nov 2023 07:53:24 GMT
Cache-Control: public, max-age=31536000
Age: 161244
Last-Modified: Tue, 24 May 2022 18:26:18 GMT
Content-Type: font/woff2
fonts.gstatic.com/s/oswald/v49/TK3IWkUHHAIjg75cFRf3bXL8LICs1_Fv40pKlN4NNSeSASz7FmlWHYg.woff2
200 OK 18 kB URL HTTP/1.1 fonts.gstatic.com/s/oswald/v49/TK3IWkUHHAIjg75cFRf3bXL8LICs1_Fv40pKlN4NNSeSASz7FmlWHYg.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 17908, version 1.0\012- data
Hash e46b4e2e3b47cc232937ebf72b4c537e
2675bc06ee643b8c935370325a327efb74746e6a
d8543b5dcaea1fc4a0301dc12b5b2adc9079e0794dd6a45879588fb844f3438e
GET /s/oswald/v49/TK3IWkUHHAIjg75cFRf3bXL8LICs1_Fv40pKlN4NNSeSASz7FmlWHYg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://altagna-trasporti.com
Connection: keep-alive
Referer: http://fonts.googleapis.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 17908
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Mon, 28 Nov 2022 22:34:54 GMT
Expires: Tue, 28 Nov 2023 22:34:54 GMT
Cache-Control: public, max-age=31536000
Age: 281154
Last-Modified: Mon, 18 Jul 2022 19:23:34 GMT
Content-Type: font/woff2
fonts.gstatic.com/s/crimsontext/v19/wlppgwHKFkZgtmSR3NB0oRJX1C1GDNNQ.woff2
200 OK 26 kB URL HTTP/1.1 fonts.gstatic.com/s/crimsontext/v19/wlppgwHKFkZgtmSR3NB0oRJX1C1GDNNQ.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 25540, version 1.0\012- data
Hash 19ab149056827f64d640fa3d65f4e536
754c09533c5b386067e762ae85f39c345ec10915
60b9b9640fc716abd752df41f38ad81052f4905e42be2ff3c1f78e851863aee0
GET /s/crimsontext/v19/wlppgwHKFkZgtmSR3NB0oRJX1C1GDNNQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://altagna-trasporti.com
Connection: keep-alive
Referer: http://fonts.googleapis.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 25540
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Tue, 29 Nov 2022 12:34:50 GMT
Expires: Wed, 29 Nov 2023 12:34:50 GMT
Cache-Control: public, max-age=31536000
Age: 230758
Last-Modified: Tue, 24 May 2022 18:29:16 GMT
Content-Type: font/woff2
fonts.gstatic.com/s/crimsontext/v19/wlpogwHKFkZgtmSR3NB0oRJfajhRK_Y.woff2
200 OK 26 kB URL HTTP/1.1 fonts.gstatic.com/s/crimsontext/v19/wlpogwHKFkZgtmSR3NB0oRJfajhRK_Y.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 26052, version 1.0\012- data
Hash 79f4a05271df2557331188959e000767
e72e4f7d2e58634ca69dabcfccb2c87d92a953d0
ded83489adaeec098ee0d639252e72be7de219f759b939ba4b2e606e5e68b272
GET /s/crimsontext/v19/wlpogwHKFkZgtmSR3NB0oRJfajhRK_Y.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://altagna-trasporti.com
Connection: keep-alive
Referer: http://fonts.googleapis.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 26052
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Tue, 29 Nov 2022 16:46:42 GMT
Expires: Wed, 29 Nov 2023 16:46:42 GMT
Cache-Control: public, max-age=31536000
Age: 215646
Last-Modified: Tue, 24 May 2022 18:28:35 GMT
Content-Type: font/woff2
altagna-trasporti.com/wp-content/themes/silvia/assets/fonts/fontawesome-webfont.woff2?v=4.5.0
200 OK 67 kB URL HTTP/1.1 altagna-trasporti.com/wp-content/themes/silvia/assets/fonts/fontawesome-webfont.woff2?v=4.5.0
IP
File type Web Open Font Format (Version 2), TrueType, length 66624, version 4.262\012- data
Hash db812d8a70a4e88e888744c1c9a27e89
638c652d623280a58144f93e7b552c66d1667a11
ff82aeed6b9bb6701696c84d1b223d2e682eb78c89117a438ce6cfea8c498995
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/silvia/assets/fonts/fontawesome-webfont.woff2?v=4.5.0 HTTP/1.1
Host: altagna-trasporti.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://altagna-trasporti.com/wp-content/themes/silvia/assets/css/plugins.min.css?ver=4.4.29
HTTP/1.1 200 OK
date: Fri, 02 Dec 2022 04:40:48 GMT
content-length: 66624
server: Apache
last-modified: Tue, 12 Jan 2016 15:12:29 GMT
accept-ranges: bytes
x-iplb-request-id: 5B5A2A9A:E46C_D5BA2128:0050_638981D0_37F71:2B75D
x-iplb-instance: 29575
altagna-trasporti.com/wp-content/uploads/2015/11/cropped-12239578_10207004365019950_2589722760803150357_n-192x192.jpg
200 OK 12 kB URL HTTP/1.1 altagna-trasporti.com/wp-content/uploads/2015/11/cropped-12239578_10207004365019950_2589722760803150357_n-192x192.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 192x192, components 3\012- data
Hash 298650ee8cf3cf7606e48ca3cea8992f
c3c8afd698bed3c813e538307d5af501e48b650c
c506be03906bd1548830e38988ca7975cfb513214612ca318d5ffee399768290
GET /wp-content/uploads/2015/11/cropped-12239578_10207004365019950_2589722760803150357_n-192x192.jpg HTTP/1.1
Host: altagna-trasporti.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://altagna-trasporti.com/
HTTP/1.1 200 OK
date: Fri, 02 Dec 2022 04:40:48 GMT
content-type: image/jpeg
content-length: 12548
server: Apache
last-modified: Fri, 27 Nov 2015 15:40:44 GMT
accept-ranges: bytes
cache-control: max-age=900
expires: Fri, 02 Dec 2022 04:55:48 GMT
x-iplb-request-id: 5B5A2A9A:E46C_D5BA2128:0050_638981D0_37F7D:2B75D
x-iplb-instance: 29575
altagna-trasporti.com/wp-content/uploads/2015/11/cropped-12239578_10207004365019950_2589722760803150357_n-32x32.jpg
200 OK 1.2 kB URL HTTP/1.1 altagna-trasporti.com/wp-content/uploads/2015/11/cropped-12239578_10207004365019950_2589722760803150357_n-32x32.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 32x32, components 3\012- data
Hash 4344afcc3a1bbba569f5fbd3c3e61fb5
524c9613cde2abdc0719a55ffb34ee26fb3e8c1c
155d13b454bab2dd47ed64ee0538b02fcd0449d56c7444e733aa2d951de2adc2
GET /wp-content/uploads/2015/11/cropped-12239578_10207004365019950_2589722760803150357_n-32x32.jpg HTTP/1.1
Host: altagna-trasporti.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://altagna-trasporti.com/
HTTP/1.1 200 OK
date: Fri, 02 Dec 2022 04:40:48 GMT
content-type: image/jpeg
content-length: 1168
server: Apache
last-modified: Fri, 27 Nov 2015 15:40:44 GMT
accept-ranges: bytes
cache-control: max-age=900
expires: Fri, 02 Dec 2022 04:55:48 GMT
x-iplb-request-id: 5B5A2A9A:71F5_D5BA2128:0050_638981D0_1C8FC:8D79
x-iplb-instance: 29574
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 27002fde234e78c7bde340bc621e933f
1bdbe4f1861601b9300101a1e6b3c143ce077e03
48d453fd9ded729e4775519885c13140e44421fe5a8c07fc464c9a354a04ef8f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 04:40:48 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, ETag, Alert, Expires, Cache-Control, Backoff, Content-Length, Content-Type, Pragma, Last-Modified
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Fri, 02 Dec 2022 04:08:57 GMT
cache-control: public,max-age=3600
age: 1911
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
www.gstatic.com/recaptcha/releases/Km9gKuG06He-isPsP6saG8cn/recaptcha__en.js
200 OK 163 kB URL HTTP/2 www.gstatic.com/recaptcha/releases/Km9gKuG06He-isPsP6saG8cn/recaptcha__en.js
IP
File type ASCII text, with very long lines (730)
Size 163 kB (162976 bytes)
Hash 79d18cf4265108d7cecca1bf4ada6109
e51d0285a545381d4c39e9e0292a650ffeeecbb9
59ce7253f371df0833c3f72d4748ef812002b90a49413c56d0ca7c40bb5a0ab6
GET /recaptcha/releases/Km9gKuG06He-isPsP6saG8cn/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://altagna-trasporti.com
Connection: keep-alive
Referer: http://altagna-trasporti.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 162976
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 28 Nov 2022 19:09:57 GMT
expires: Tue, 28 Nov 2023 19:09:57 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 14 Nov 2022 03:01:59 GMT
content-type: text/javascript
age: 293451
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 27002fde234e78c7bde340bc621e933f
1bdbe4f1861601b9300101a1e6b3c143ce077e03
48d453fd9ded729e4775519885c13140e44421fe5a8c07fc464c9a354a04ef8f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 04:40:48 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 471 B IP
Hash 1f88399f3fdd89dbb9ca1229cb67143a
325c9dbfd932cf9a6fb9fab2dd8e27083f55a9a3
831ecd45dcd2d5ae2ae86cd63ea5e94ecd85281b7e51054af5df9a6386fb8d79
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2326
Cache-Control: max-age=104687
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 04:40:48 GMT
Etag: "63886ea9-1d7"
Expires: Sat, 03 Dec 2022 09:45:35 GMT
Last-Modified: Thu, 01 Dec 2022 09:06:49 GMT
Server: ECS (ska/F715)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: cGE7UimJTiRvYcbXwsYRyA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: EjycqTkoHSr47NX08HMC3e11gPk=
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ecab83d593cc540b02689be5be7abc8a
81cda579b7b9b22332b85266b0126585f3d3f73f
d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8304
Expires: Fri, 02 Dec 2022 06:59:14 GMT
Date: Fri, 02 Dec 2022 04:40:50 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ecab83d593cc540b02689be5be7abc8a
81cda579b7b9b22332b85266b0126585f3d3f73f
d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8304
Expires: Fri, 02 Dec 2022 06:59:14 GMT
Date: Fri, 02 Dec 2022 04:40:50 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ecab83d593cc540b02689be5be7abc8a
81cda579b7b9b22332b85266b0126585f3d3f73f
d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8304
Expires: Fri, 02 Dec 2022 06:59:14 GMT
Date: Fri, 02 Dec 2022 04:40:50 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ecab83d593cc540b02689be5be7abc8a
81cda579b7b9b22332b85266b0126585f3d3f73f
d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8304
Expires: Fri, 02 Dec 2022 06:59:14 GMT
Date: Fri, 02 Dec 2022 04:40:50 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ecab83d593cc540b02689be5be7abc8a
81cda579b7b9b22332b85266b0126585f3d3f73f
d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8304
Expires: Fri, 02 Dec 2022 06:59:14 GMT
Date: Fri, 02 Dec 2022 04:40:50 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F683f066f-699d-4765-8f4f-33c72e1672e2.jpeg
200 OK 6.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F683f066f-699d-4765-8f4f-33c72e1672e2.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b986f9fcbeca91ed5c8d58fbfaf47d19
6e6c8bd2bce144cc4da1cd7be375b046b60dca79
07a8938d2841f8c13bd646f4e79e41e46acd6463aa019cd70871b3741f12bb4f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F683f066f-699d-4765-8f4f-33c72e1672e2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6174
x-amzn-requestid: f78f1e9d-8c0c-495d-a862-61838f8297e8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cZ0iyH2WoAMFQdg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63870144-45442a8544259930564f685b;Sampled=0
x-amzn-remapped-date: Wed, 30 Nov 2022 07:07:48 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: QIOz71_Kr08pIIwOm2GUkWr421fO7-UyUI7LYld0JBaGnYQ0j3IDFg==
via: 1.1 eece508272520f70691e4eebdc5a6dea.cloudfront.net (CloudFront), 1.1 d6a002c70d55f415107618b0750d493c.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Dec 2022 07:15:42 GMT
age: 77108
etag: "6e6c8bd2bce144cc4da1cd7be375b046b60dca79"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6b6b798b-d396-454d-9d5b-17b47827e4ad.jpeg
200 OK 2.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6b6b798b-d396-454d-9d5b-17b47827e4ad.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b47431190f34eccf0a6efb98e2a32b7d
9fc7ab3a4eb2d36fd6df7e0267a26a47627d1704
08d3b6be354cafb70c20e6865788cb375adbf88d47711651fe1a3b855094daf2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6b6b798b-d396-454d-9d5b-17b47827e4ad.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 2942
x-amzn-requestid: ed26679f-cd56-477f-9914-f9afbcaaeea6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cfGeoGFYoAMFWgA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63891df7-4ec6bebe21656d5026456994;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 21:34:47 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: Fw6nrporwF27NW0-vXpaolW79nDXLF2RyS-lqhhp1osHt7q98VpI3g==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 9046e5a276a05e60ee34c8475e92b8e6.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Dec 2022 21:34:47 GMT
age: 25563
etag: "9fc7ab3a4eb2d36fd6df7e0267a26a47627d1704"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbb30f254-1327-487b-a297-00361bfd5c02.jpeg
200 OK 7.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbb30f254-1327-487b-a297-00361bfd5c02.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash cd78aa69439c995167f32b8a41a1f4f6
d07d6145182f312f3ed86ecf96b4ffa175416fa0
3b08cf3fad31ee0cf3ee25abc2484fb4283543865a42dfc568b14f9856fd3bb5
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbb30f254-1327-487b-a297-00361bfd5c02.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7722
x-amzn-requestid: 8d7c4800-6c06-43ed-afa1-94840d42f591
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cfGy2Gr1IAMFWeQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63891e78-429ae3135d47e3b020c4c7a1;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 21:36:56 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: Z8thSamrCRejcAcQEGAp4WpSMzMEvstuZtVpKAjiCH4dyJyf1yihBA==
via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 f9d716a351f14a0ac1fac2449734849a.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Dec 2022 21:50:11 GMT
age: 24639
etag: "d07d6145182f312f3ed86ecf96b4ffa175416fa0"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F321bfec8-0690-49d3-ba43-a2899f137b6b.jpeg
200 OK 1.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F321bfec8-0690-49d3-ba43-a2899f137b6b.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 367a113e3826442861c63ba501d2d67d
764f6910ecc1ee436a70aa83f5bd363c2e500341
5e5cc53aba99e68211c86a2fd83ac4a023d1c82875d60a09d52875ef129cbb71
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F321bfec8-0690-49d3-ba43-a2899f137b6b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 1654
x-amzn-requestid: 537d523f-a3fb-4514-bda5-ecc834c1ed39
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cfGgBEFNIAMFTjw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63891dff-0c12ccea20e953c236ca2b1b;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 21:34:56 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: IXNpFJsiqPvrg8f-op2tcIVW2qoV7ZPm12wsTTXfYu0369N4Csy8BA==
via: 1.1 010c0731b9775a983eceaec0f5fa6a2e.cloudfront.net (CloudFront), 1.1 324a68a6c25ee50d774953f3e15a611c.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Dec 2022 22:06:58 GMT
age: 23632
etag: "764f6910ecc1ee436a70aa83f5bd363c2e500341"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe82fdd03-be1f-4def-adb8-61eefd79def6.jpeg
200 OK 9.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe82fdd03-be1f-4def-adb8-61eefd79def6.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6e65083422468e512aa73eb68f20b2ec
73884daab5e71e4917637b3679c0bb5a1f0447de
f0d97bb9e3f01bbdbe91ba1f9b6ea0f649c66192383c51fe5c7ca9ac2a38ebdb
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe82fdd03-be1f-4def-adb8-61eefd79def6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9719
x-amzn-requestid: c4ba3502-e191-40fa-8ae0-71dc6f733db4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cPjhHE8woAMFyKw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6382e606-70ab0e5523c91e5420efec78;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 04:22:30 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: oBn917CDV6DjSs9TAL2iBU0Rn8_f8ny1rAVXrbI9KML2P7pxusbdjA==
via: 1.1 1b0911478686968732f973d6e5e31d10.cloudfront.net (CloudFront), 1.1 be082a2326b7d49643607b097f1e7180.cloudfront.net (CloudFront), 1.1 google
date: Fri, 02 Dec 2022 03:43:01 GMT
age: 3469
etag: "73884daab5e71e4917637b3679c0bb5a1f0447de"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc5183c67-4568-43c8-a2e7-7b41f5ca064b.jpeg
200 OK 4.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc5183c67-4568-43c8-a2e7-7b41f5ca064b.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash cd8ad22c2eb1eb91c76970fa449f1bc4
0de97f3a4964038222bd751e043e413113e6db9d
668f805815aede3bc04f8564bd6aefd56029362bb0aa8a794673eb78ab2d4643
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc5183c67-4568-43c8-a2e7-7b41f5ca064b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4834
x-amzn-requestid: 63a0b8b5-5cb3-4a1f-aa46-47c84abe726f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cZQrjEeAIAMF3sw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6386c7e3-0032799009f893ba79f314db;Sampled=0
x-amzn-remapped-date: Wed, 30 Nov 2022 03:02:59 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: bBj-TXtavCuORZ9qBoZeVj-GXeRljAeW-98HY7lTk5_VRSKF4_07VQ==
via: 1.1 56c69262ecfa7873b40572ba8a323242.cloudfront.net (CloudFront), 1.1 7022a5bbf9872d4a09d63e6cdb457dfe.cloudfront.net (CloudFront), 1.1 google
date: Fri, 02 Dec 2022 04:22:38 GMT
age: 1092
etag: "0de97f3a4964038222bd751e043e413113e6db9d"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
213.186.33.40
142.250.74.42
93.184.220.29
23.36.77.32