Report - 188.219.128.165/wg_atessa

Report Overview

Submitted URL
188.219.128.165/wg_atessa_wip/index.php
IP
188.219.128.165
ASN
#30722 Vodafone Italia S.p.A.
Submitted
2023-01-25 15:57:58
Access
Website Title
Final URL
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
54

Domain Summary

Domain / FQDN	Rank	First Seen	Last Seen	Sent	Received	IP
188.219.128.165	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	12 kB	807 kB	188.219.128.165
img-getpocket.cdn.mozilla.net	1631	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	3.2 kB	62 kB	34.120.237.76
r3.o.lencr.org	344	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	2.4 kB	6.2 kB	23.36.76.226
firefox.settings.services.mozilla.com	867	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	782 B	2.4 kB	35.241.9.150
content-signature-2.cdn.mozilla.net	1152	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	413 B	5.8 kB	34.160.144.191
contile.services.mozilla.com	1114	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	333 B	391 B	34.117.237.239
push.services.mozilla.com	2140	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	606 B	127 B	54.200.117.177

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2023-01-25	medium	188.219.128.165	Sinkholed
2023-01-25	medium	188.219.128.165	Sinkholed
2023-01-25	medium	188.219.128.165	Sinkholed
2023-01-25	medium	188.219.128.165	Sinkholed
2023-01-25	medium	188.219.128.165	Sinkholed
2023-01-25	medium	188.219.128.165	Sinkholed
2023-01-25	medium	188.219.128.165	Sinkholed
2023-01-25	medium	188.219.128.165	Sinkholed
2023-01-25	medium	188.219.128.165	Sinkholed
2023-01-25	medium	188.219.128.165	Sinkholed
2023-01-25	medium	188.219.128.165	Sinkholed
2023-01-25	medium	188.219.128.165	Sinkholed
2023-01-25	medium	188.219.128.165	Sinkholed
2023-01-25	medium	188.219.128.165	Sinkholed
2023-01-25	medium	188.219.128.165	Sinkholed
2023-01-25	medium	188.219.128.165	Sinkholed
2023-01-25	medium	188.219.128.165	Sinkholed
2023-01-25	medium	188.219.128.165	Sinkholed
2023-01-25	medium	188.219.128.165	Sinkholed
2023-01-25	medium	188.219.128.165	Sinkholed
2023-01-25	medium	188.219.128.165	Sinkholed
2023-01-25	medium	188.219.128.165	Sinkholed
2023-01-25	medium	188.219.128.165	Sinkholed
2023-01-25	medium	188.219.128.165	Sinkholed
2023-01-25	medium	188.219.128.165	Sinkholed
2023-01-25	medium	188.219.128.165	Sinkholed
2023-01-25	medium	188.219.128.165	Sinkholed

ThreatFox

No alerts detected

JavaScript (12)

	URL	Size	First Seen	Last Seen
	188.219.128.165/wg_atessa_wip/kendo/js/messages/kendo.messages.it-IT.min.js	8.3 kB	2023-03-09	2024-01-05
Pretty URL 188.219.128.165/wg_atessa_wip/kendo/js/messages/kendo.messages.it-IT.min.js IP 188.219.128.165 ASN #30722 Vodafone Italia S.p.A. Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-09 22:38:33 Last Seen2024-01-05 12:52:10 Times Seen7 Hash 7e45e21572b9237532b1bb8fcb2caf05 b297b15c138f7faa5af821ad0bd011d26ccc5d30 2e0aa71f2b3c3e5637bc2c9da66081bcb6b7e7e6905c9ded6ed1892bb5763fd9 Loading...

	188.219.128.165/wg_atessa_wip/kendo/js/kendo.all.min.js	2.1 MB	2023-03-13	2024-01-05
Pretty URL 188.219.128.165/wg_atessa_wip/kendo/js/kendo.all.min.js IP 188.219.128.165 ASN #30722 Vodafone Italia S.p.A. Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-13 06:49:25 Last Seen2024-01-05 12:52:10 Times Seen7 Hash e404f9829830bae567d65247fd318123 9f975adf5c547df56a1264f09b0784efcd9011b4 ad63878035964c68b974d1718e61b55a9720e2e2bb52bca404c6b71a28a41aa8 Loading...

	188.219.128.165/wg_atessa_wip/kendo/js/cultures/kendo.culture.it-IT.min.js	1.5 kB	2023-03-09	2024-01-05
Pretty URL 188.219.128.165/wg_atessa_wip/kendo/js/cultures/kendo.culture.it-IT.min.js IP 188.219.128.165 ASN #30722 Vodafone Italia S.p.A. Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-09 22:38:34 Last Seen2024-01-05 12:52:10 Times Seen7 Hash 2a0abf72c00eff936ad91f00efb34038 2d306c7a10bd5aeba6ced3b38bbdc589241c3da8 f8205365a708202cb1349823c853654825019eb6d2860316c5b0e248ca7b4813 Loading...

	188.219.128.165/wg_atessa_wip/index.php	11 kB	2023-03-09	2023-03-13
Pretty URL 188.219.128.165/wg_atessa_wip/index.php IP 188.219.128.165 ASN #30722 Vodafone Italia S.p.A. Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-09 22:38:33 Last Seen2023-03-13 07:07:54 Times Seen1 Hash 815dca9a229680d5e0a03d22be9b0162 6370eeff50a062c93b9b72fefad410b1ed0d64f0 a72b69d217af4293e088135a77c9bec5b8f6fc5a138947bb126ed28fedb3c420 Loading...

	188.219.128.165/wg_atessa_wip/index.php	194 B	2023-03-09	2023-08-13
Pretty URL 188.219.128.165/wg_atessa_wip/index.php IP 188.219.128.165 ASN #30722 Vodafone Italia S.p.A. Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-09 22:38:34 Last Seen2023-08-13 12:20:57 Times Seen2 Hash c87d9e2ad0b3af3a7a33dc6064c72dc3 0de86f8e7b1ef664750e08d2055494bc8579b1c0 7fec73134f75e795a7a47505a9b28d6da5ea21385fd76231e1e56294ebdd5b67 Loading...

	188.219.128.165/wg_atessa_wip/index.php	191 B	2023-03-09	2023-08-13
Pretty URL 188.219.128.165/wg_atessa_wip/index.php IP 188.219.128.165 ASN #30722 Vodafone Italia S.p.A. Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-09 22:38:34 Last Seen2023-08-13 12:20:57 Times Seen2 Hash 6f503618c35f7965b9e8fdab20f534ce 162de18ee6918d4076f339a8c9bec196cd9c6e2c 271ffdb8138692e6ac364e6066a29009bb93514087a9ebd5e96b50c6a0e1ef1f Loading...

	188.219.128.165/wg_atessa_wip/index.php	36 kB	2023-03-13	2023-03-13
Pretty URL 188.219.128.165/wg_atessa_wip/index.php IP 188.219.128.165 ASN #30722 Vodafone Italia S.p.A. Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-13 07:07:54 Last Seen2023-03-13 07:07:54 Times Seen1 Hash d6640f7ab8e1b33dd25e22b3c8153ff6 b7b6b824ae7c1d3f5f7f6fe6f6aa5724cfb3eaae af216d9515604c3d7748aad3b2224e048c888345b0734dfa882449e84152f667 Loading...

	188.219.128.165/wg_atessa_wip/kendo/js/jquery.min.js	93 kB	2023-03-07	2024-04-26
Pretty URL 188.219.128.165/wg_atessa_wip/kendo/js/jquery.min.js IP 188.219.128.165 ASN #30722 Vodafone Italia S.p.A. Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:08 Last Seen2024-04-26 22:54:57 Times Seen23400 Hash 397754ba49e9e0cf4e7c190da78dda05 ae49e56999d82802727455f0ba83b63acd90a22b c12f6098e641aaca96c60215800f18f5671039aecf812217fab3c0d152f6adb4 Loading...

	188.219.128.165/wg_atessa_wip/index.php	3.3 kB	2023-03-13	2023-03-13
Pretty URL 188.219.128.165/wg_atessa_wip/index.php IP 188.219.128.165 ASN #30722 Vodafone Italia S.p.A. Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-13 07:07:54 Last Seen2023-03-13 07:07:54 Times Seen1 Hash 1a367e7463d494c116fc68c57c8768d0 d9fbedbf5237a71c321ed7b49e2ab99b9c63bee4 60494cc68f6256cf5fba6ecba5db3981904b06255447d68557d27433c33b837b Loading...

	188.219.128.165/wg_atessa_wip/index.php	3.5 kB	2023-03-13	2023-03-13
Pretty URL 188.219.128.165/wg_atessa_wip/index.php IP 188.219.128.165 ASN #30722 Vodafone Italia S.p.A. Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-13 07:07:54 Last Seen2023-03-13 07:07:54 Times Seen1 Hash 1a29454eaf22e4c71cd6a590d56fa333 f0639827cb2fa88844ce28eb504aada383e3c6e1 560a1008cf908e0cc7d89de348ad7f2f8948a72b9ab8335b00bd9ec83b829e81 Loading...

	188.219.128.165/wg_atessa_wip/index.php	7.4 kB	2023-03-13	2023-03-13
Pretty URL 188.219.128.165/wg_atessa_wip/index.php IP 188.219.128.165 ASN #30722 Vodafone Italia S.p.A. Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-13 07:07:54 Last Seen2023-03-13 07:07:54 Times Seen1 Hash cc42b7fe0d1ae36c0683f984c4795b0e 58b9457c18f278a4edd6936d20f9ba04bc6b43b8 5cf1921eefd3621974589dc576f4d47969ab5840d21496c3d802f0104015c3d5 Loading...

	188.219.128.165/wg_atessa_wip/kendo/js/jszip.min.js	76 kB	2023-03-07	2023-08-13
Pretty URL 188.219.128.165/wg_atessa_wip/kendo/js/jszip.min.js IP 188.219.128.165 ASN #30722 Vodafone Italia S.p.A. Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 12:09:19 Last Seen2023-08-13 12:20:58 Times Seen14 Hash a778df39333432bb8c5ad0f81d02d296 e1065bd34d3bfa12e44537d1fc7419315f76d240 215fb2537b13d82daabd46e1ee59ffe4dce90abd0acb0ac5432e77071f422e9c Loading...

HTTP Transactions (45)

URL IP Response Size

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
58ffdcb539c3b250fdf31ed761627fc1
5b55b1522ef84c39b5c42f9bbfbc62b806c1269f
eb783cfa8c8544b0574b345abc0bf3c150979d4efce1a013f17b6cd48076fc63

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EB783CFA8C8544B0574B345ABC0BF3C150979D4EFCE1A013F17B6CD48076FC63"
Last-Modified: Wed, 25 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11203
Expires: Wed, 25 Jan 2023 19:04:30 GMT
Date: Wed, 25 Jan 2023 15:57:47 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
f5e46725831d8d722872bf68d752f4c5
cf37793a1b73e3f84fe6c37fb27382c83b49dbc0
0582b6180687dd95c7fd728f1b9db4495b807151e309b608ad203d69708f9da6

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0582B6180687DD95C7FD728F1B9DB4495B807151E309B608AD203D69708F9DA6"
Last-Modified: Tue, 24 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8766
Expires: Wed, 25 Jan 2023 18:23:53 GMT
Date: Wed, 25 Jan 2023 15:57:47 GMT
Connection: keep-alive

firefox.settings.services.mozilla.com/v1/

35.241.9.150

200 OK

939 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/
IP
35.241.9.150:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size
939 B (939 bytes)
Hash
dcd75ca6daca51c5e39d431468511793
07f76d3bf23d65c9110d810fa71a994e39e085d3
73672a816da4450fe2c938b08d7ae002d9ca29fdcbd3e29cc97084d826f8b459

HTTP Headers

GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Backoff, Content-Length, Alert, Retry-After
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Wed, 25 Jan 2023 15:35:13 GMT
content-type: application/json
age: 1354
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
49049f3c92aad686cd7ff28ecd2a5a4f
9cc2bc9c055450dbc4fae93eabe4ef8509b3ff57
02cf421968192286bb174ff0e6c818a843c4eca61a02cd493e6f95bb58a37015

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "02CF421968192286BB174FF0E6C818A843C4ECA61A02CD493E6F95BB58A37015"
Last-Modified: Wed, 25 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6754
Expires: Wed, 25 Jan 2023 17:50:21 GMT
Date: Wed, 25 Jan 2023 15:57:47 GMT
Connection: keep-alive

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain

34.160.144.191

200 OK

5.3 kB

URL HTTP/2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP
34.160.144.191:0
ASN
#15169 GOOGLE

File type
PEM certificate\012- , ASCII text
Size
5.3 kB (5348 bytes)
Hash
7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c

HTTP Headers

GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
x-amz-id-2: 2jtTaFOEv7+fpKKp61Qhn8Sj1PETmo+vB2U7ay7X6gzlCagGdInJ1sKeknmEorcZ9xdC3OekoKg=
x-amz-request-id: 2J5P6DF90N8CXHH7
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Wed, 25 Jan 2023 15:48:37 GMT
age: 550
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2

contile.services.mozilla.com/v1/tiles

34.117.237.239

200 OK

12 B

URL HTTP/2
contile.services.mozilla.com/v1/tiles
IP
34.117.237.239:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with no line terminators
Size
12 B (12 bytes)
Hash
23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

HTTP Headers

GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
date: Wed, 25 Jan 2023 15:57:47 GMT
content-type: application/json
content-length: 12
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2

firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US

35.241.9.150

200 OK

329 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
35.241.9.150:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size
329 B (329 bytes)
Hash
0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

HTTP Headers

GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Last-Modified, ETag, Expires, Backoff, Content-Length, Cache-Control, Alert, Retry-After, Pragma
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Wed, 25 Jan 2023 15:48:59 GMT
age: 528
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
1e2970e1480a4759282d63bb213051e4
ed5194d4d25dfc199821129be5d74be0ce49197d
18e19ea4c9c262cb9a94f89172eef2604222e779346589d470bf2e95ea295563

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "18E19EA4C9C262CB9A94F89172EEF2604222E779346589D470BF2E95EA295563"
Last-Modified: Tue, 24 Jan 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10619
Expires: Wed, 25 Jan 2023 18:54:46 GMT
Date: Wed, 25 Jan 2023 15:57:47 GMT
Connection: keep-alive

push.services.mozilla.com/

54.200.117.177

101 Switching Protocols

0 B

URL HTTP/1.1
push.services.mozilla.com/
IP
54.200.117.177:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: dmQetT3D4JhgZLN9OMcfAg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: nPzvSjFWA8WNXbPBWUVfTZ9bxos=

188.219.128.165/wg_atessa_wip/index.php

188.219.128.165

200 OK

16 kB

URL HTTP/1.1
188.219.128.165/wg_atessa_wip/index.php
IP
188.219.128.165:0
ASN
#30722 Vodafone Italia S.p.A.

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (355)
Size
16 kB (15819 bytes)
Hash
5609f38b9f72a23f1108ed011ba44dc7
6a94af1c5f42c2e49f489201e9ed7174c3fffd70
2fd7e4168990c719b71376a847c43a06d850834353972c1d208884e61a8bc342

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /wg_atessa_wip/index.php HTTP/1.1
Host: 188.219.128.165
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

HTTP/1.1 200 OK
Date: Wed, 25 Jan 2023 15:58:31 GMT
Server: Apache
X-Powered-By: PHP/5.5.9-1ubuntu4.21
Set-Cookie: PHPSESSID=7nq6ni95nanib4nfif7na27ak5; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Allow-Origin: *
Content-Length: 15819
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
bd56ce22720c6e6072efdabae64669fd
29194390d12177fe0d88e1bd2fb4436509366a1c
c41996d83d942ca58a13e2d1adfd171cf26a84bc9b7fdbd1ca941eb0269b5404

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C41996D83D942CA58A13E2D1ADFD171CF26A84BC9B7FDBD1CA941EB0269B5404"
Last-Modified: Wed, 25 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2617
Expires: Wed, 25 Jan 2023 16:41:26 GMT
Date: Wed, 25 Jan 2023 15:57:49 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
bd56ce22720c6e6072efdabae64669fd
29194390d12177fe0d88e1bd2fb4436509366a1c
c41996d83d942ca58a13e2d1adfd171cf26a84bc9b7fdbd1ca941eb0269b5404

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C41996D83D942CA58A13E2D1ADFD171CF26A84BC9B7FDBD1CA941EB0269B5404"
Last-Modified: Wed, 25 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2617
Expires: Wed, 25 Jan 2023 16:41:26 GMT
Date: Wed, 25 Jan 2023 15:57:49 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.76.226

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
bd56ce22720c6e6072efdabae64669fd
29194390d12177fe0d88e1bd2fb4436509366a1c
c41996d83d942ca58a13e2d1adfd171cf26a84bc9b7fdbd1ca941eb0269b5404

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C41996D83D942CA58A13E2D1ADFD171CF26A84BC9B7FDBD1CA941EB0269B5404"
Last-Modified: Wed, 25 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2617
Expires: Wed, 25 Jan 2023 16:41:26 GMT
Date: Wed, 25 Jan 2023 15:57:49 GMT
Connection: keep-alive

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F67efee66-d227-4c28-89a3-8fd7f382049b.jpeg

34.120.237.76

200 OK

8.3 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F67efee66-d227-4c28-89a3-8fd7f382049b.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
8.3 kB (8308 bytes)
Hash
91b2e12a39dc4f63b9d52e8800cce1f2
42d5b4b4a091778d98c351f0002d8656449d0243
d4dbc79e3383e83f861ccf8cde3e78ba427a66cd3fa99c17e23ec935867de4ad

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F67efee66-d227-4c28-89a3-8fd7f382049b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 8308
x-amzn-requestid: 1988d3b3-5e1a-41fd-83f5-092eddb9185f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fNys5GDKoAMFdbA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63cefe52-2349fde60b7db8a34c996717;Sampled=0
x-amzn-remapped-date: Mon, 23 Jan 2023 21:38:26 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 5_1j_Z6HZ3DSGFPAACJduM5D9eAqMQT42GgI61x8dHAmPQtUexpEYQ==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 556b99c6be8d7078b9f067347c62df6a.cloudfront.net (CloudFront), 1.1 google
date: Tue, 24 Jan 2023 22:06:36 GMT
age: 64273
etag: "42d5b4b4a091778d98c351f0002d8656449d0243"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

6.0 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F33050e82-3c0a-40d6-a722-e4ff96872edc.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
6.0 kB (6026 bytes)
Hash
bb6c1403a1d3c878c08ccaf17f8b3d0a
7596b783e0da5fba63c49374933eccffc223d729
1524dbef51237950d4a14a0e2e053fad933dd92ee0831e2de5c45513122f1d58

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F33050e82-3c0a-40d6-a722-e4ff96872edc.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 6026
x-amzn-requestid: 4b05d7f7-783f-4a79-9eed-bbbeb53bc677
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fRQ-QHmZIAMF6gw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d061f4-721f473c5c8dadd163ca7689;Sampled=0
x-amzn-remapped-date: Tue, 24 Jan 2023 22:55:48 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: uuhyzrUcYv-zqjLZvGNYsUuAhCW2vkKpEhQQKlmfSgHDtKz0jD2PNQ==
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 324a68a6c25ee50d774953f3e15a611c.cloudfront.net (CloudFront), 1.1 google
date: Tue, 24 Jan 2023 23:18:31 GMT
age: 59958
etag: "7596b783e0da5fba63c49374933eccffc223d729"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

13 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F09ccbe5e-77b1-4d6d-98f5-a477f3861d8c.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
13 kB (12758 bytes)
Hash
7458f7a9b2070055df6f1d496794e43e
0f5d2a6d846f4f8f85dd7e8089e643cacc57d8a9
373097662c419eef9f4a19ce9f3bcead70f6eafbf0acf44806685eece43ce251

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F09ccbe5e-77b1-4d6d-98f5-a477f3861d8c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 12758
x-amzn-requestid: c3540562-8c62-4957-9528-7ae952daebaa
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: e9gf1E87oAMFpsQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c87acb-49fd3f78275937e24d23fca3;Sampled=0
x-amzn-remapped-date: Wed, 18 Jan 2023 23:03:39 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: c5YOTqrEv9RLv_lKsrC377yost8auxYRPLubBFGjIWtnbueiGMJYGw==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 324a68a6c25ee50d774953f3e15a611c.cloudfront.net (CloudFront), 1.1 google
date: Wed, 25 Jan 2023 07:33:54 GMT
age: 30235
etag: "0f5d2a6d846f4f8f85dd7e8089e643cacc57d8a9"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

9.7 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3f7aba17-803f-412c-8ef7-0959b52f87cc.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
9.7 kB (9650 bytes)
Hash
13891ffe8a0cc240be63b7945e4b7688
958b50e9e7e5e02882d55612a5d6d2402e225390
1570d69731ba13051454a048ac85bde7c1de8e39dea0fd78e7e5c3f2be122cb6

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3f7aba17-803f-412c-8ef7-0959b52f87cc.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 9650
x-amzn-requestid: 3b968ee5-c941-4305-9f06-01e646deef15
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fH88wEUmoAMFerw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63cca851-061f65177f36420a4685f372;Sampled=0
x-amzn-remapped-date: Sun, 22 Jan 2023 03:06:57 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: xfiiS5M5j8iYKMyopaVqwYV6KKB1VIWT_yQbEKZ9G1wuq2QUEyDBpA==
via: 1.1 9b311162717b41c968f6f00426d88aaa.cloudfront.net (CloudFront), 1.1 e66162aafd55b64ba1478ff7105150fa.cloudfront.net (CloudFront), 1.1 google
date: Wed, 25 Jan 2023 03:16:15 GMT
age: 45694
etag: "958b50e9e7e5e02882d55612a5d6d2402e225390"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

11 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9192d2a7-4090-4a55-b72e-388ceb1f506d.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
11 kB (10921 bytes)
Hash
1d76c1b1126a3e1b51dcca652cb6727b
b199a381ccac4628f2bfa626b44c71954713ca98
3a34f2b7f79cb925c73d2c17197418004e4acf63a6eb69e471320069978f8282

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9192d2a7-4090-4a55-b72e-388ceb1f506d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 10921
x-amzn-requestid: 7b8849e6-b52d-4165-b456-b200ddbb993b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fEqtkGThIAMFb7g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63cb57f0-1ed4803112d97956419b299e;Sampled=0
x-amzn-remapped-date: Sat, 21 Jan 2023 03:11:44 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: FUbNMfYy8ci6d78p6LCu0Gxs3jw824ZzVp6drAbl8HCDBpghlZFP7g==
via: 1.1 4dde8ec6d6c12741888c2d3a059d4a2e.cloudfront.net (CloudFront), 1.1 82ea95080f526df99896343fb7269b06.cloudfront.net (CloudFront), 1.1 google
date: Wed, 25 Jan 2023 04:19:27 GMT
age: 41902
etag: "b199a381ccac4628f2bfa626b44c71954713ca98"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

8.3 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F46e473b9-0adb-4371-8146-b148ce85cdec.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
8.3 kB (8252 bytes)
Hash
d10114508bd40d76f497fc5b9c064350
c9b86b2b27063e0a58b0f237d451f9cf05b2122d
a156bd21bee2fca1d82940fb172a695044321ed432786ae100a7baf3b5e12b3f

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F46e473b9-0adb-4371-8146-b148ce85cdec.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 8252
x-amzn-requestid: c7064a36-7bb0-42c7-9ee8-9ee798ce8cbf
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fEq3UEjVoAMFipg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63cb582e-5be2ad2a217f9b4b6834a278;Sampled=0
x-amzn-remapped-date: Sat, 21 Jan 2023 03:12:46 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: b4EbiS-go4Yy-UcA4CbKj10TbS6qKgQd6ZgqB3XVyd9ieBPszfx_jw==
via: 1.1 8dbfaf7df256a75768461d934659b6b2.cloudfront.net (CloudFront), 1.1 be082a2326b7d49643607b097f1e7180.cloudfront.net (CloudFront), 1.1 google
date: Tue, 24 Jan 2023 21:47:57 GMT
age: 65392
etag: "c9b86b2b27063e0a58b0f237d451f9cf05b2122d"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

188.219.128.165/wg_atessa_wip/styles/examples-offline.css

188.219.128.165

200 OK

1.6 kB

URL HTTP/1.1
188.219.128.165/wg_atessa_wip/styles/examples-offline.css
IP
188.219.128.165:0
ASN
#30722 Vodafone Italia S.p.A.

File type
ASCII text
Size
1.6 kB (1625 bytes)
Hash
0313fa31c126d45d3a787268886b8bd4
703fafce87e55e59c200b72aec641009a391a36d
19a4f8e89382023746aa9a65b943768cc9e056e1f2103a34276710648a50d2fa

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /wg_atessa_wip/styles/examples-offline.css HTTP/1.1
Host: 188.219.128.165
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://188.219.128.165/wg_atessa_wip/index.php
Cookie: PHPSESSID=7nq6ni95nanib4nfif7na27ak5

HTTP/1.1 200 OK
Date: Wed, 25 Jan 2023 15:58:33 GMT
Server: Apache
Last-Modified: Wed, 30 Jan 2019 07:04:52 GMT
ETag: "142f-580a786cb3761-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Allow-Origin: *
Content-Length: 1625
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css

188.219.128.165/wg_atessa_wip/styles/stile_scoped.css

188.219.128.165

200 OK

2.3 kB

URL HTTP/1.1
188.219.128.165/wg_atessa_wip/styles/stile_scoped.css
IP
188.219.128.165:0
ASN
#30722 Vodafone Italia S.p.A.

File type
HTML document, ASCII text
Size
2.3 kB (2329 bytes)
Hash
fe9fedff47bef19ca874b9db14ac4646
86079a6339f70dcbd1921d4d54ba88b06357d94a
23943d51d21ac600dc763d426698d55b4cc702a3ff24a7fc859bf0d78063f6ba

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /wg_atessa_wip/styles/stile_scoped.css HTTP/1.1
Host: 188.219.128.165
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://188.219.128.165/wg_atessa_wip/index.php
Cookie: PHPSESSID=7nq6ni95nanib4nfif7na27ak5

HTTP/1.1 200 OK
Date: Wed, 25 Jan 2023 15:58:33 GMT
Server: Apache
Last-Modified: Wed, 30 Jan 2019 07:04:52 GMT
ETag: "2e95-580a786cb3761-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Allow-Origin: *
Content-Length: 2329
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css

188.219.128.165/wg_atessa_wip/kendo/js/jquery.min.js

188.219.128.165

200 OK

33 kB

URL HTTP/1.1
188.219.128.165/wg_atessa_wip/kendo/js/jquery.min.js
IP
188.219.128.165:0
ASN
#30722 Vodafone Italia S.p.A.

File type
ASCII text, with very long lines (32089)
Size
33 kB (32775 bytes)
Hash
fcf0a7201168a979dd4b222a54471e0f
9056c50ea859db10d2d959654d0f8dde367360ee
c40969745be3d2181fd5d40425f9080ac2c62e63d298c1de8bb4bbda5e4ea0f7

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /wg_atessa_wip/kendo/js/jquery.min.js HTTP/1.1
Host: 188.219.128.165
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://188.219.128.165/wg_atessa_wip/index.php
Cookie: PHPSESSID=7nq6ni95nanib4nfif7na27ak5

HTTP/1.1 200 OK
Date: Wed, 25 Jan 2023 15:58:34 GMT
Server: Apache
Last-Modified: Wed, 30 Jan 2019 07:04:53 GMT
ETag: "169d5-580a786d2e821-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Allow-Origin: *
Content-Length: 32775
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/javascript

188.219.128.165/wg_atessa_wip/kendo/styles/kendo.blueopal.min.css

188.219.128.165

200 OK

7.2 kB

URL HTTP/1.1
188.219.128.165/wg_atessa_wip/kendo/styles/kendo.blueopal.min.css
IP
188.219.128.165:0
ASN
#30722 Vodafone Italia S.p.A.

File type
ASCII text, with very long lines (47644)
Size
7.2 kB (7176 bytes)
Hash
39e5c711a9ad611a930c29ad9147340d
89830808ab76bd58c607b8afbdcc7aaff9a9eef4
b627dc529b81ad78c5ee94329ce24037cb44ff798877819c9138b7beacd8a8d4

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /wg_atessa_wip/kendo/styles/kendo.blueopal.min.css HTTP/1.1
Host: 188.219.128.165
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://188.219.128.165/wg_atessa_wip/index.php
Cookie: PHPSESSID=7nq6ni95nanib4nfif7na27ak5

HTTP/1.1 200 OK
Date: Wed, 25 Jan 2023 15:58:33 GMT
Server: Apache
Last-Modified: Wed, 30 Jan 2019 07:04:53 GMT
ETag: "bb69-580a786cf8cc1-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Allow-Origin: *
Content-Length: 7176
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css

188.219.128.165/wg_atessa_wip/kendo/js/cultures/kendo.culture.it-IT.min.js

188.219.128.165

200 OK

780 B

URL HTTP/1.1
188.219.128.165/wg_atessa_wip/kendo/js/cultures/kendo.culture.it-IT.min.js
IP
188.219.128.165:0
ASN
#30722 Vodafone Italia S.p.A.

File type
Unicode text, UTF-8 text, with very long lines (1201)
Size
780 B (780 bytes)
Hash
e2117b2179244cbbc1987b8ace972cc8
efc8254a81c38ff979b7b127b76bd8997cf374f8
a54bb469158c977fe22a02c77ef7f40ff5fea6fc5ff62d6558d529d60d4c774c

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /wg_atessa_wip/kendo/js/cultures/kendo.culture.it-IT.min.js HTTP/1.1
Host: 188.219.128.165
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://188.219.128.165/wg_atessa_wip/index.php
Cookie: PHPSESSID=7nq6ni95nanib4nfif7na27ak5

HTTP/1.1 200 OK
Date: Wed, 25 Jan 2023 15:58:34 GMT
Server: Apache
Last-Modified: Wed, 30 Jan 2019 07:04:53 GMT
ETag: "605-580a786d21d01-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Allow-Origin: *
Content-Length: 780
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: application/javascript

188.219.128.165/wg_atessa_wip/kendo/styles/kendo.common.min.css

188.219.128.165

200 OK

32 kB

URL HTTP/1.1
188.219.128.165/wg_atessa_wip/kendo/styles/kendo.common.min.css
IP
188.219.128.165:0
ASN
#30722 Vodafone Italia S.p.A.

File type
ASCII text, with very long lines (65203)
Size
32 kB (31931 bytes)
Hash
dc9bee9a7e5b192a510783ec58263e2d
139f9cc0b04b80bcd07b3eb908de9755939face1
50905748a16526e360ff5272434f6d3cde5439a6ffd67aac768d7ac7ceaa092a

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /wg_atessa_wip/kendo/styles/kendo.common.min.css HTTP/1.1
Host: 188.219.128.165
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://188.219.128.165/wg_atessa_wip/index.php
Cookie: PHPSESSID=7nq6ni95nanib4nfif7na27ak5

HTTP/1.1 200 OK
Date: Wed, 25 Jan 2023 15:58:33 GMT
Server: Apache
Last-Modified: Wed, 30 Jan 2019 07:04:53 GMT
ETag: "34236-580a786cf6d81-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Allow-Origin: *
Content-Length: 31931
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css

188.219.128.165/wg_atessa_wip/kendo/js/jszip.min.js

188.219.128.165

200 OK

23 kB

URL HTTP/1.1
188.219.128.165/wg_atessa_wip/kendo/js/jszip.min.js
IP
188.219.128.165:0
ASN
#30722 Vodafone Italia S.p.A.

File type
data
Size
23 kB (23376 bytes)
Hash
a41bbaa31db7a3d647e7ae7a2bbf0274
ae99f55a7b29d92816c4cf3856cc44615b12d815
b34bcad850ba6ed13c74e63d21efc292708348c580d2952a0f442aa3a54d42d7

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /wg_atessa_wip/kendo/js/jszip.min.js HTTP/1.1
Host: 188.219.128.165
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://188.219.128.165/wg_atessa_wip/index.php
Cookie: PHPSESSID=7nq6ni95nanib4nfif7na27ak5

HTTP/1.1 200 OK
Date: Wed, 25 Jan 2023 15:58:34 GMT
Server: Apache
Last-Modified: Wed, 30 Jan 2019 07:04:53 GMT
ETag: "126e2-580a786d31701-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Allow-Origin: *
Content-Length: 23376
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: application/javascript

188.219.128.165/wg_atessa_wip/styles/legenda.css

188.219.128.165

200 OK

312 B

URL HTTP/1.1
188.219.128.165/wg_atessa_wip/styles/legenda.css
IP
188.219.128.165:0
ASN
#30722 Vodafone Italia S.p.A.

File type
ASCII text
Size
312 B (312 bytes)
Hash
9ceda738073242fe53b797f1b029c0f8
0bb629e2e2dc5b639abc5132e26c270b8fb846bf
66b02f7c2aaf4d093646bd0c9f5d9518997831eeb05ea55abdfd588627601b1f

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /wg_atessa_wip/styles/legenda.css HTTP/1.1
Host: 188.219.128.165
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://188.219.128.165/wg_atessa_wip/index.php
Cookie: PHPSESSID=7nq6ni95nanib4nfif7na27ak5

HTTP/1.1 200 OK
Date: Wed, 25 Jan 2023 15:58:35 GMT
Server: Apache
Last-Modified: Wed, 30 Jan 2019 07:04:52 GMT
ETag: "24b-580a786cb3761-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Allow-Origin: *
Content-Length: 312
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css

188.219.128.165/wg_atessa_wip/kendo/js/messages/kendo.messages.it-IT.min.js

188.219.128.165

200 OK

2.9 kB

URL HTTP/1.1
188.219.128.165/wg_atessa_wip/kendo/js/messages/kendo.messages.it-IT.min.js
IP
188.219.128.165:0
ASN
#30722 Vodafone Italia S.p.A.

File type
Unicode text, UTF-8 text, with very long lines (7963)
Size
2.9 kB (2862 bytes)
Hash
435dea648d7f4e18501246e9c2186533
4f39847adcbd9c47544691408f188b11c1bf7cf3
bf6f9801f981b86315aafb6cf970a5e4a6e916633a3dc5ef2b56ef0d3745089b

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /wg_atessa_wip/kendo/js/messages/kendo.messages.it-IT.min.js HTTP/1.1
Host: 188.219.128.165
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://188.219.128.165/wg_atessa_wip/index.php
Cookie: PHPSESSID=7nq6ni95nanib4nfif7na27ak5

HTTP/1.1 200 OK
Date: Wed, 25 Jan 2023 15:58:34 GMT
Server: Apache
Last-Modified: Wed, 30 Jan 2019 07:04:53 GMT
ETag: "2097-580a786d326a1-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Allow-Origin: *
Content-Length: 2862
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: application/javascript

188.219.128.165/wg_atessa_wip/kendo/js/kendo.all.min.js

188.219.128.165

200 OK

623 kB

URL HTTP/1.1
188.219.128.165/wg_atessa_wip/kendo/js/kendo.all.min.js
IP
188.219.128.165:0
ASN
#30722 Vodafone Italia S.p.A.

File type
ASCII text, with very long lines (32138)
Size
623 kB (623302 bytes)
Hash
c1d2a50c6714cae38d98a17553ec6925
90b410bf5f478c335c206461213885d1d6fe21b3
d6b925793ca4223faeab52e0ed76e250478e15d1d012ac02ca3fcd8bfaa4e74a

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /wg_atessa_wip/kendo/js/kendo.all.min.js HTTP/1.1
Host: 188.219.128.165
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://188.219.128.165/wg_atessa_wip/index.php
Cookie: PHPSESSID=7nq6ni95nanib4nfif7na27ak5

HTTP/1.1 200 OK
Date: Wed, 25 Jan 2023 15:58:34 GMT
Server: Apache
Last-Modified: Wed, 30 Jan 2019 07:04:53 GMT
ETag: "1ffc43-580a786d17121-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Allow-Origin: *
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: application/javascript

188.219.128.165/wg_atessa_wip/icons/page_white_database.png

188.219.128.165

200 OK

579 B

URL HTTP/1.1
188.219.128.165/wg_atessa_wip/icons/page_white_database.png
IP
188.219.128.165:0
ASN
#30722 Vodafone Italia S.p.A.

File type
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced\012- data
Size
579 B (579 bytes)
Hash
03e2b564224bfb58ff20904bda244043
c7ce83f920d97c0da50a6173d48874a85240f10f
0af69a93256994d368ef42f7a6b51104ecf5a73aed16794f0a47b7be94ac1131

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /wg_atessa_wip/icons/page_white_database.png HTTP/1.1
Host: 188.219.128.165
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://188.219.128.165/wg_atessa_wip/index.php
Cookie: PHPSESSID=7nq6ni95nanib4nfif7na27ak5

HTTP/1.1 200 OK
Date: Wed, 25 Jan 2023 15:58:37 GMT
Server: Apache
Last-Modified: Wed, 30 Jan 2019 07:04:57 GMT
ETag: "243-580a787104ee1"
Accept-Ranges: bytes
Content-Length: 579
Access-Control-Allow-Origin: *
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/png

188.219.128.165/wg_atessa_wip/icons/zoom.png

188.219.128.165

200 OK

692 B

URL HTTP/1.1
188.219.128.165/wg_atessa_wip/icons/zoom.png
IP
188.219.128.165:0
ASN
#30722 Vodafone Italia S.p.A.

File type
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced\012- data
Size
692 B (692 bytes)
Hash
b36200916d810e20a176a0e274acb0eb
b6fbb9dee348e78f49079cf2b821155bb026fec7
3bda017383ceb591c5e0519dbf50fcb6886156c12ca548560119b7d03b54e419

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /wg_atessa_wip/icons/zoom.png HTTP/1.1
Host: 188.219.128.165
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://188.219.128.165/wg_atessa_wip/index.php
Cookie: PHPSESSID=7nq6ni95nanib4nfif7na27ak5

HTTP/1.1 200 OK
Date: Wed, 25 Jan 2023 15:58:37 GMT
Server: Apache
Last-Modified: Wed, 30 Jan 2019 07:04:57 GMT
ETag: "2b4-580a787109d01"
Accept-Ranges: bytes
Content-Length: 692
Access-Control-Allow-Origin: *
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/png

188.219.128.165/wg_atessa_wip/icons/page_white_acrobat.png

188.219.128.165

200 OK

591 B

URL HTTP/1.1
188.219.128.165/wg_atessa_wip/icons/page_white_acrobat.png
IP
188.219.128.165:0
ASN
#30722 Vodafone Italia S.p.A.

File type
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced\012- data
Size
591 B (591 bytes)
Hash
5ee15843554004d12736f0404f8d443a
0cd7923476a98f84137b91c68e7488398770de57
27420ea72e036ea1511bf0a0a4b263a02a2bf52ecd0e297c05ea1d50e7bb218a

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /wg_atessa_wip/icons/page_white_acrobat.png HTTP/1.1
Host: 188.219.128.165
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://188.219.128.165/wg_atessa_wip/index.php
Cookie: PHPSESSID=7nq6ni95nanib4nfif7na27ak5

HTTP/1.1 200 OK
Date: Wed, 25 Jan 2023 15:58:37 GMT
Server: Apache
Last-Modified: Wed, 30 Jan 2019 07:04:57 GMT
ETag: "24f-580a7870fb2a1"
Accept-Ranges: bytes
Content-Length: 591
Access-Control-Allow-Origin: *
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/png

188.219.128.165/wg_atessa_wip/icons/error.png

188.219.128.165

200 OK

666 B

URL HTTP/1.1
188.219.128.165/wg_atessa_wip/icons/error.png
IP
188.219.128.165:0
ASN
#30722 Vodafone Italia S.p.A.

File type
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced\012- data
Size
666 B (666 bytes)
Hash
c847e1076da70df83ef5284622b82a74
3855754e8fc9331c67dd2d0789d9f2d6e7daae8b
011f4e33d86b448078a2bd56b7060770b2c079e86aad2b7298ab0db216758f34

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /wg_atessa_wip/icons/error.png HTTP/1.1
Host: 188.219.128.165
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://188.219.128.165/wg_atessa_wip/index.php
Cookie: PHPSESSID=7nq6ni95nanib4nfif7na27ak5

HTTP/1.1 200 OK
Date: Wed, 25 Jan 2023 15:58:37 GMT
Server: Apache
Last-Modified: Wed, 30 Jan 2019 07:04:57 GMT
ETag: "29a-580a787103f41"
Accept-Ranges: bytes
Content-Length: 666
Access-Control-Allow-Origin: *
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/png

188.219.128.165/wg_atessa_wip/icons/chart_bar.png

188.219.128.165

200 OK

541 B

URL HTTP/1.1
188.219.128.165/wg_atessa_wip/icons/chart_bar.png
IP
188.219.128.165:0
ASN
#30722 Vodafone Italia S.p.A.

File type
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced\012- data
Size
541 B (541 bytes)
Hash
8d60518c6d18af693cfeea9c066026c1
4e9576a56db3d142113b8905d7aa93e31c9f441b
29be9ef9bc6f6a08c7d514035e29c1b751d2f4b697bb6c8317361f9a08163c07

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /wg_atessa_wip/icons/chart_bar.png HTTP/1.1
Host: 188.219.128.165
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://188.219.128.165/wg_atessa_wip/index.php
Cookie: PHPSESSID=7nq6ni95nanib4nfif7na27ak5

HTTP/1.1 200 OK
Date: Wed, 25 Jan 2023 15:58:37 GMT
Server: Apache
Last-Modified: Wed, 30 Jan 2019 07:04:57 GMT
ETag: "21d-580a787104ee1"
Accept-Ranges: bytes
Content-Length: 541
Access-Control-Allow-Origin: *
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/png

188.219.128.165/wg_atessa_wip/t_classe.php

188.219.128.165

200 OK

2.3 kB

URL HTTP/1.1
188.219.128.165/wg_atessa_wip/t_classe.php
IP
188.219.128.165:0
ASN
#30722 Vodafone Italia S.p.A.

File type
JSON data\012- , ASCII text, with very long lines (2300), with no line terminators
Size
2.3 kB (2300 bytes)
Hash
cec3be64817299cd3fddebe50ce46475
89d4f864fae14bd33f8b5738756f7dd557b2d82d
6806cf9ddd13e0519a4e45cfbb0ef7f0b278cde7b7a712e2603782838b2420ad

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /wg_atessa_wip/t_classe.php HTTP/1.1
Host: 188.219.128.165
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: http://188.219.128.165/wg_atessa_wip/index.php
Cookie: PHPSESSID=7nq6ni95nanib4nfif7na27ak5

HTTP/1.1 200 OK
Date: Wed, 25 Jan 2023 15:58:38 GMT
Server: Apache
X-Powered-By: PHP/5.5.9-1ubuntu4.21
Access-Control-Allow-Origin: *
Content-Length: 2300
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: application/json

188.219.128.165/wg_atessa_wip/albericlassi.php?filter%5Blogic%5D=and&filter%5Bfilters%5D%5B0%5D%5Bfield%5D=classe&filter%5Bfilters%5D%5B0%5D%5Boperator%5D=number.eq&filter%5Bfilters%5D%5B0%5D%5Bvalue%5D=all

188.219.128.165

200 OK

25 B

URL HTTP/1.1
188.219.128.165/wg_atessa_wip/albericlassi.php?filter%5Blogic%5D=and&filter%5Bfilters%5D%5B0%5D%5Bfield%5D=classe&filter%5Bfilters%5D%5B0%5D%5Boperator%5D=number.eq&filter%5Bfilters%5D%5B0%5D%5Bvalue%5D=all
IP
188.219.128.165:0
ASN
#30722 Vodafone Italia S.p.A.

File type
JSON data\012- , ASCII text, with no line terminators
Size
25 B (25 bytes)
Hash
6a13061a9d57af7aab082a7dd9fca6aa
0a2b2d986f89690393be4f3261f9d8c7af11ae1b
f359ab8fd535184ea2c6655954928da4e210beb67d31bb40c6b6d0e4f535ab24

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /wg_atessa_wip/albericlassi.php?filter%5Blogic%5D=and&filter%5Bfilters%5D%5B0%5D%5Bfield%5D=classe&filter%5Bfilters%5D%5B0%5D%5Boperator%5D=number.eq&filter%5Bfilters%5D%5B0%5D%5Bvalue%5D=all HTTP/1.1
Host: 188.219.128.165
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/json; charset=utf-8
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: http://188.219.128.165/wg_atessa_wip/index.php
Cookie: PHPSESSID=7nq6ni95nanib4nfif7na27ak5

HTTP/1.1 200 OK
Date: Wed, 25 Jan 2023 15:58:38 GMT
Server: Apache
X-Powered-By: PHP/5.5.9-1ubuntu4.21
Access-Control-Allow-Origin: *
Content-Length: 25
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: application/json

188.219.128.165/wg_atessa_wip/json_cerca_attivita_produttive.php?take=15&skip=0&page=1&pageSize=15&sort%5B0%5D%5Bfield%5D=civ_id&sort%5B0%5D%5Bdir%5D=asc&filter%5Blogic%5D=and&filter%5Bfilters%5D%5B0%5D%5Bfield%5D=atp_data_fine&filter%5Bfilters%5D%5B0%5D%5Boperator%5D=IS+NULL&filter%5Bfilters%5D%5B0%5D%5Bvalue%5D=IS+NULL

188.219.128.165

200 OK

923 B

URL HTTP/1.1
188.219.128.165/wg_atessa_wip/json_cerca_attivita_produttive.php?take=15&skip=0&page=1&pageSize=15&sort%5B0%5D%5Bfield%5D=civ_id&sort%5B0%5D%5Bdir%5D=asc&filter%5Blogic%5D=and&filter%5Bfilters%5D%5B0%5D%5Bfield%5D=atp_data_fine&filter%5Bfilters%5D%5B0%5D%5Boperator%5D=IS+NULL&filter%5Bfilters%5D%5B0%5D%5Bvalue%5D=IS+NULL
IP
188.219.128.165:0
ASN
#30722 Vodafone Italia S.p.A.

File type
JSON data\012- , ASCII text, with very long lines (923), with no line terminators
Size
923 B (923 bytes)
Hash
aeb96e2f69107e421ed12f20a0233c90
cf728ad07f18f470a1a908d73dd5f92ce098ef01
8a1a91b8b9aa0a03b985cf49e023589f817aafa251b76444c566acf070aaa819

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /wg_atessa_wip/json_cerca_attivita_produttive.php?take=15&skip=0&page=1&pageSize=15&sort%5B0%5D%5Bfield%5D=civ_id&sort%5B0%5D%5Bdir%5D=asc&filter%5Blogic%5D=and&filter%5Bfilters%5D%5B0%5D%5Bfield%5D=atp_data_fine&filter%5Bfilters%5D%5B0%5D%5Boperator%5D=IS+NULL&filter%5Bfilters%5D%5B0%5D%5Bvalue%5D=IS+NULL HTTP/1.1
Host: 188.219.128.165
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/json; charset=utf-8
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: http://188.219.128.165/wg_atessa_wip/index.php
Cookie: PHPSESSID=7nq6ni95nanib4nfif7na27ak5

HTTP/1.1 200 OK
Date: Wed, 25 Jan 2023 15:58:38 GMT
Server: Apache
X-Powered-By: PHP/5.5.9-1ubuntu4.21
Access-Control-Allow-Origin: *
Content-Length: 923
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: application/json

188.219.128.165/wg_atessa_wip/styles/bg.png

188.219.128.165

200 OK

1.1 kB

URL HTTP/1.1
188.219.128.165/wg_atessa_wip/styles/bg.png
IP
188.219.128.165:0
ASN
#30722 Vodafone Italia S.p.A.

File type
PNG image data, 7 x 482, 8-bit/color RGB, non-interlaced\012- data
Size
1.1 kB (1130 bytes)
Hash
aef1ace4692fe4f6dbd3273a842d9894
752601d8a5795b263f8656739abaff3f8357c1a5
89dc20f4e20de9631f7c977cf41d6d2473acb7f01f7fd92a3429cbcd2601ffe2

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /wg_atessa_wip/styles/bg.png HTTP/1.1
Host: 188.219.128.165
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://188.219.128.165/wg_atessa_wip/styles/examples-offline.css
Cookie: PHPSESSID=7nq6ni95nanib4nfif7na27ak5

HTTP/1.1 200 OK
Date: Wed, 25 Jan 2023 15:58:38 GMT
Server: Apache
Last-Modified: Wed, 30 Jan 2019 07:04:52 GMT
ETag: "46a-580a786cb3761"
Accept-Ranges: bytes
Content-Length: 1130
Access-Control-Allow-Origin: *
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: image/png

188.219.128.165/wg_atessa_wip/icons/geografico.png

188.219.128.165

200 OK

4.7 kB

URL HTTP/1.1
188.219.128.165/wg_atessa_wip/icons/geografico.png
IP
188.219.128.165:0
ASN
#30722 Vodafone Italia S.p.A.

File type
PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced\012- data
Size
4.7 kB (4719 bytes)
Hash
62d1400c4e2b981924c8c553b9922c50
41c081e612faeda1b5956acb17fbac8f8f8cbc7e
9f61078a141b4fb06e43965801a7a1c3cb5cd41935079f8d39fd1b6f2055228a

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /wg_atessa_wip/icons/geografico.png HTTP/1.1
Host: 188.219.128.165
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://188.219.128.165/wg_atessa_wip/index.php
Cookie: PHPSESSID=7nq6ni95nanib4nfif7na27ak5

HTTP/1.1 200 OK
Date: Wed, 25 Jan 2023 15:58:37 GMT
Server: Apache
Last-Modified: Wed, 30 Jan 2019 07:04:57 GMT
ETag: "126f-580a787101061"
Accept-Ranges: bytes
Content-Length: 4719
Access-Control-Allow-Origin: *
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/png

188.219.128.165/wg_atessa_wip/json_arco_strada_search.php?take=20&skip=0&page=1&pageSize=20&sort%5B0%5D%5Bfield%5D=str_descr&sort%5B0%5D%5Bdir%5D=desc

188.219.128.165

200 OK

4.0 kB

URL HTTP/1.1
188.219.128.165/wg_atessa_wip/json_arco_strada_search.php?take=20&skip=0&page=1&pageSize=20&sort%5B0%5D%5Bfield%5D=str_descr&sort%5B0%5D%5Bdir%5D=desc
IP
188.219.128.165:0
ASN
#30722 Vodafone Italia S.p.A.

File type
JSON data\012- , ASCII text, with very long lines (3999), with no line terminators
Size
4.0 kB (3999 bytes)
Hash
d3b879ec6ba8ed427169b5fb174d83a2
76287cfc6917f662c65683987ba4d6193fb8c938
7e7b0ce8c460e5a37ec7f8562b3fa50f2d35bc0be09d556a03cd534b39a8cc8d

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /wg_atessa_wip/json_arco_strada_search.php?take=20&skip=0&page=1&pageSize=20&sort%5B0%5D%5Bfield%5D=str_descr&sort%5B0%5D%5Bdir%5D=desc HTTP/1.1
Host: 188.219.128.165
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/json; charset=utf-8
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: http://188.219.128.165/wg_atessa_wip/index.php
Cookie: PHPSESSID=7nq6ni95nanib4nfif7na27ak5

HTTP/1.1 200 OK
Date: Wed, 25 Jan 2023 15:58:39 GMT
Server: Apache
X-Powered-By: PHP/5.5.9-1ubuntu4.21
Access-Control-Allow-Origin: *
Content-Length: 3999
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: application/json

188.219.128.165/wg_atessa_wip/t_stradario.php

188.219.128.165

200 OK

24 kB

URL HTTP/1.1
188.219.128.165/wg_atessa_wip/t_stradario.php
IP
188.219.128.165:0
ASN
#30722 Vodafone Italia S.p.A.

File type
JSON data\012- , ASCII text, with very long lines (24414), with no line terminators
Size
24 kB (24414 bytes)
Hash
94561df16bd65dbc2c873f3cdd84d9bb
e96cf44ec413b039286cb766493dc1e99577e472
186d0284ba3c8f097d018ebfeb509b8ace77186ef7ceb18abc55df7edaa4dbd6

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /wg_atessa_wip/t_stradario.php HTTP/1.1
Host: 188.219.128.165
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: http://188.219.128.165/wg_atessa_wip/index.php
Cookie: PHPSESSID=7nq6ni95nanib4nfif7na27ak5

HTTP/1.1 200 OK
Date: Wed, 25 Jan 2023 15:58:38 GMT
Server: Apache
X-Powered-By: PHP/5.5.9-1ubuntu4.21
Access-Control-Allow-Origin: *
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: application/json

188.219.128.165/wg_atessa_wip/json_civici_search.php?take=20&skip=0&page=1&pageSize=20&sort%5B0%5D%5Bfield%5D=civ_codice&sort%5B0%5D%5Bdir%5D=desc

188.219.128.165

200 OK

14 kB

URL HTTP/1.1
188.219.128.165/wg_atessa_wip/json_civici_search.php?take=20&skip=0&page=1&pageSize=20&sort%5B0%5D%5Bfield%5D=civ_codice&sort%5B0%5D%5Bdir%5D=desc
IP
188.219.128.165:0
ASN
#30722 Vodafone Italia S.p.A.

File type
JSON data\012- , ASCII text, with very long lines (14322), with no line terminators
Size
14 kB (14322 bytes)
Hash
bbec3ec5c4b9845c8c643bd70424c659
f9bb5349355d8d67839af044c37f3579c656e8f5
4c5629c47736816064e57b67ef6f0c99380836bb1443d6c4a1987b54ae829207

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /wg_atessa_wip/json_civici_search.php?take=20&skip=0&page=1&pageSize=20&sort%5B0%5D%5Bfield%5D=civ_codice&sort%5B0%5D%5Bdir%5D=desc HTTP/1.1
Host: 188.219.128.165
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/json; charset=utf-8
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: http://188.219.128.165/wg_atessa_wip/index.php
Cookie: PHPSESSID=7nq6ni95nanib4nfif7na27ak5

HTTP/1.1 200 OK
Date: Wed, 25 Jan 2023 15:58:39 GMT
Server: Apache
X-Powered-By: PHP/5.5.9-1ubuntu4.21
Access-Control-Allow-Origin: *
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: application/json

188.219.128.165/wg_atessa_wip/json_stato_segnalazione.php?take=10&skip=0&page=1&pageSize=10

188.219.128.165

200 OK

436 B

URL HTTP/1.1
188.219.128.165/wg_atessa_wip/json_stato_segnalazione.php?take=10&skip=0&page=1&pageSize=10
IP
188.219.128.165:0
ASN
#30722 Vodafone Italia S.p.A.

File type
JSON data\012- , ASCII text, with very long lines (435)
Size
436 B (436 bytes)
Hash
c7523ceb9a2787a65d89de6259dbb8e6
6bd4c7d1cbbfaad5305549c25cc041c190b130fb
b9ef5fbe116e1fa0e45b6e7095c74a0d31ee31a1461ce3f6484a342e3202290e

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /wg_atessa_wip/json_stato_segnalazione.php?take=10&skip=0&page=1&pageSize=10 HTTP/1.1
Host: 188.219.128.165
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: http://188.219.128.165/wg_atessa_wip/index.php
Cookie: PHPSESSID=7nq6ni95nanib4nfif7na27ak5

HTTP/1.1 200 OK
Date: Wed, 25 Jan 2023 15:58:39 GMT
Server: Apache
X-Powered-By: PHP/5.5.9-1ubuntu4.21
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Access-Control-Allow-Origin: *
Content-Length: 436
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: application/json

188.219.128.165/wg_atessa_wip/json_comuni.php?take=10&skip=0&page=1&pageSize=10

188.219.128.165

200 OK

26 B

URL HTTP/1.1
188.219.128.165/wg_atessa_wip/json_comuni.php?take=10&skip=0&page=1&pageSize=10
IP
188.219.128.165:0
ASN
#30722 Vodafone Italia S.p.A.

File type
JSON data\012- , ASCII text
Size
26 B (26 bytes)
Hash
6019d40ba2c25b0fdbbc0d872792eb6e
440b5afe218eb57a1a4d494c987b287814a658e6
590851ce7b8fed825c6c8e17a340b26e2a7774f05d5c413f3e3af49fb9d84ed3

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /wg_atessa_wip/json_comuni.php?take=10&skip=0&page=1&pageSize=10 HTTP/1.1
Host: 188.219.128.165
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: http://188.219.128.165/wg_atessa_wip/index.php
Cookie: PHPSESSID=7nq6ni95nanib4nfif7na27ak5

HTTP/1.1 200 OK
Date: Wed, 25 Jan 2023 15:58:39 GMT
Server: Apache
X-Powered-By: PHP/5.5.9-1ubuntu4.21
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Access-Control-Allow-Origin: *
Content-Length: 26
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: application/json

188.219.128.165/wg_atessa_wip/ambito.php?skip=0&page=1

188.219.128.165

200 OK

993 B

URL HTTP/1.1
188.219.128.165/wg_atessa_wip/ambito.php?skip=0&page=1
IP
188.219.128.165:0
ASN
#30722 Vodafone Italia S.p.A.

File type
JSON data\012- , ASCII text, with very long lines (993), with no line terminators
Size
993 B (993 bytes)
Hash
2fe1bf6aa5c27582252414ad435b03d4
bfdeb3108c2ec76d57ee164374c2b097cfd5eb27
87f6a4b1353c469051eb319ef2a197efb54c40389aea1290f880da1bf26447d2

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

GET /wg_atessa_wip/ambito.php?skip=0&page=1 HTTP/1.1
Host: 188.219.128.165
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: http://188.219.128.165/wg_atessa_wip/index.php
Cookie: PHPSESSID=7nq6ni95nanib4nfif7na27ak5

HTTP/1.1 200 OK
Date: Wed, 25 Jan 2023 15:58:40 GMT
Server: Apache
X-Powered-By: PHP/5.5.9-1ubuntu4.21
Access-Control-Allow-Origin: *
Content-Length: 993
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: application/json

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (12)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML