| www.runwildsafarisafrica.com/intesa_2022/riferimento/66c971c2282ac8a15ce66a763265eeef/763d666fa99114aa84471d840319f7dc/mobile/login |  34.141.48.9 | 301 Moved Permanently | 154 B |
URL HTTP/1.1www.runwildsafarisafrica.com/intesa_2022/riferimento/66c971c2282ac8a15ce66a763265eeef/763d666fa99114aa84471d840319f7dc/mobile/login IP34.141.48.9:0 ASN#396982 GOOGLE-CLOUD-PLATFORM
File typeASCII text, with no line terminators Hasheadae12ba22cfe1792a868ffa255fc80 945d3aefbc779b317cff10f97e0108e76dc864ba 47716f40894476577039ad2615103b13f9e29aae79704c746c4e9a26a4a5a9ee
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /intesa_2022/riferimento/66c971c2282ac8a15ce66a763265eeef/763d666fa99114aa84471d840319f7dc/mobile/login HTTP/1.1
Host: www.runwildsafarisafrica.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Location: https://www.runwildsafarisafrica.com/intesa_2022/riferimento/66c971c2282ac8a15ce66a763265eeef/763d666fa99114aa84471d840319f7dc/mobile/login
Server: Netlify
X-Nf-Request-Id: 01GK326NS222SVV9QGAKW2P5WE
Date: Wed, 30 Nov 2022 01:25:15 GMT
Content-Length: 154
Content-Type: text/plain; charset=utf-8
|
|
| r3.o.lencr.org/ |  23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash2d2e7649ce9e9ba6fc8b68aa89352e3c 0153d1d3d830a457043e16bb40d48a0b9ddef4b8 8eed57c91b42ef7b2d5eff1309e306e23e13c3de21219af24a693cbf3e8977fc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8EED57C91B42EF7B2D5EFF1309E306E23E13C3DE21219AF24A693CBF3E8977FC"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5682
Expires: Wed, 30 Nov 2022 02:59:57 GMT
Date: Wed, 30 Nov 2022 01:25:15 GMT
Connection: keep-alive
|
|
| ocsp.digicert.com/ |  93.184.220.29 | 200 OK | 55 B |
IP93.184.220.29:0
File typeHTML document, ASCII text Hash9f073354411bbaf7a319b1519f10b4b7 571498f38548829bf186f49f5be9d5fa6e689a68 4a7aaaa1c093dee8a191d4469c9f701c5e62e88896bc778a13cc4ffedf9be89a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6157
Cache-Control: public, max-age=1209600
Content-Type: text/html
Date: Wed, 30 Nov 2022 01:25:15 GMT
Etag: "638651c5-37"
Last-Modified: Tue, 29 Nov 2022 18:39:01 GMT
Server: ECS (ska/F70F)
X-Cache: HIT
Content-Length: 55
|
|
| firefox.settings.services.mozilla.com/v1/ |  34.102.187.140 | 200 OK | 939 B |
URL HTTP/2firefox.settings.services.mozilla.com/v1/ IP34.102.187.140:0
File typeJSON data\012- , ASCII text, with very long lines (939), with no line terminators Hash14cd9a0afb6ba9a763651d5112760d1e 75d7b104ab9ab11fbb73c3f348b43b0119b5adfa 4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Retry-After, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Wed, 30 Nov 2022 01:19:38 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 337
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash9fce5679881bf302a8978a0b462f01a9 b699fe030ea13ac73813e655c42ed9b531925e2b a3ec545a8f9364ac9062eddb41279e1465687a1b60f9c1dec6b3a3df8b033eb3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A3EC545A8F9364AC9062EDDB41279E1465687A1B60F9C1DEC6B3A3DF8B033EB3"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8533
Expires: Wed, 30 Nov 2022 03:47:28 GMT
Date: Wed, 30 Nov 2022 01:25:15 GMT
Connection: keep-alive
|
|
| content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain | 34.160.144.191 | 200 OK | 5.3 kB |
URL HTTP/2content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain IP34.160.144.191:0
File typePEM certificate\012- , ASCII text Hash9ebddc2b260d081ebbefee47c037cb28 492bad62a7ca6a74738921ef5ae6f0be5edebf39 74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: /TSnKTWcpnfPjux06MzxpXwOvSo7gaHUP2brChq0ws70MtU691hRmKg10qO08XndePQin6n51/c=
x-amz-request-id: 1SS5J1S4MVWS8XJY
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Wed, 30 Nov 2022 00:45:01 GMT
age: 2414
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| contile.services.mozilla.com/v1/tiles | 34.117.237.239 | 200 OK | 12 B |
URL HTTP/2contile.services.mozilla.com/v1/tiles IP34.117.237.239:0
File typeJSON data\012- , ASCII text, with no line terminators Hash23e88fb7b99543fb33315b29b1fad9d6 a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 30 Nov 2022 01:25:15 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hashabbba0813d9b46cf1df4e1d0f6f8ddf9 e0b225dd525d6a5383a761621778202b1cfdd615 ec416a45806981e44ac044d4f0a7371be04cb3138e4cba1d702ca059b3d64c4f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EC416A45806981E44AC044D4F0A7371BE04CB3138E4CBA1D702CA059B3D64C4F"
Last-Modified: Wed, 30 Nov 2022 01:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20411
Expires: Wed, 30 Nov 2022 07:05:27 GMT
Date: Wed, 30 Nov 2022 01:25:16 GMT
Connection: keep-alive
|
|
| firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US | 34.102.187.140 | 200 OK | 329 B |
URL HTTP/2firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US IP34.102.187.140:0
File typeJSON data\012- , ASCII text, with very long lines (329), with no line terminators Hash0333b0655111aa68de771adfcc4db243 63f295a144ac87a7c8e23417626724eeca68a7eb 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Pragma, Last-Modified, ETag, Alert, Expires, Retry-After, Cache-Control, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Wed, 30 Nov 2022 01:08:56 GMT
cache-control: public,max-age=3600
age: 980
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hash3c8c689bd654417640d85f3da51af313 85123b6d46230a23d03768bf304b386e5d301305 516138ca79703b45e904d32d7dde1c1e9fd35995b9f1bb1331c547542745676d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 526
Cache-Control: max-age=114618
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 01:25:16 GMT
Etag: "6385cba8-1d7"
Expires: Thu, 01 Dec 2022 09:15:34 GMT
Last-Modified: Tue, 29 Nov 2022 09:06:48 GMT
Server: ECS (ska/F70F)
X-Cache: HIT
Content-Length: 471
|
|
| www.runwildsafarisafrica.com/_next/static/chunks/pages/_error-fb68742d3cf986b6.js | 34.159.132.250 | 200 OK | 247 B |
URL HTTP/2www.runwildsafarisafrica.com/_next/static/chunks/pages/_error-fb68742d3cf986b6.js IP34.159.132.250:0 ASN#396982 GOOGLE-CLOUD-PLATFORM
File typeASCII text, with no line terminators Hashd66eff3ae2b109e192c6862230a756c0 bccd418588a2ea8faf8fad7a2684316e24e5a964 9a76fbd1a7f211e1d5e6ce12042e448b22d8bd73a4493add6b577f4da0417634
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /_next/static/chunks/pages/_error-fb68742d3cf986b6.js HTTP/1.1
Host: www.runwildsafarisafrica.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.runwildsafarisafrica.com/intesa_2022/riferimento/66c971c2282ac8a15ce66a763265eeef/763d666fa99114aa84471d840319f7dc/mobile/login
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
age: 0
cache-control: public, max-age=0, must-revalidate
content-type: application/javascript; charset=UTF-8
date: Wed, 30 Nov 2022 01:25:16 GMT
etag: "cbee2af1701d33ffba8311cd6c8edcd4-ssl"
server: Netlify
strict-transport-security: max-age=31536000
x-nf-request-id: 01GK326PKCQ17BKB041AW3A6EX
content-length: 247
X-Firefox-Spdy: h2
|
|
| www.runwildsafarisafrica.com/_next/static/sOGw26JMlLXit-mPZ8Y8S/_ssgManifest.js | 34.159.132.250 | 200 OK | 296 B |
URL HTTP/2www.runwildsafarisafrica.com/_next/static/sOGw26JMlLXit-mPZ8Y8S/_ssgManifest.js IP34.159.132.250:0 ASN#396982 GOOGLE-CLOUD-PLATFORM
File typeASCII text, with no line terminators Hashf780abb7b08bf54b40d4e10d619fc27f ee92bcbf0f7e7e31ec490d03ee7c4f21b39c1ceb 6517be0fdf538e19a4c385f345b26954f31d5a87aa7a3c4d8a2f0a378eba7716
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /_next/static/sOGw26JMlLXit-mPZ8Y8S/_ssgManifest.js HTTP/1.1
Host: www.runwildsafarisafrica.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.runwildsafarisafrica.com/intesa_2022/riferimento/66c971c2282ac8a15ce66a763265eeef/763d666fa99114aa84471d840319f7dc/mobile/login
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
age: 0
cache-control: public, max-age=0, must-revalidate
content-type: application/javascript; charset=UTF-8
date: Wed, 30 Nov 2022 01:25:16 GMT
etag: "44c90e0a29ac98b420e316574435eac3-ssl"
server: Netlify
strict-transport-security: max-age=31536000
x-nf-request-id: 01GK326PKDJA1EA7Y4TQ26J82Z
content-length: 296
X-Firefox-Spdy: h2
|
|
| www.runwildsafarisafrica.com/_next/static/sOGw26JMlLXit-mPZ8Y8S/_buildManifest.js | 34.159.132.250 | 200 OK | 649 B |
URL HTTP/2www.runwildsafarisafrica.com/_next/static/sOGw26JMlLXit-mPZ8Y8S/_buildManifest.js IP34.159.132.250:0 ASN#396982 GOOGLE-CLOUD-PLATFORM
File typeASCII text, with very long lines (1804), with no line terminators Hash55ad07c19a51a5108475d7294e90f64d 7840ac325579a96e1d5adfc10bca93f5be79359b 4b57fda2b5fd5b06d41c14e2760939902f3b22327f2d2a1534f40e14a4a595a9
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /_next/static/sOGw26JMlLXit-mPZ8Y8S/_buildManifest.js HTTP/1.1
Host: www.runwildsafarisafrica.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.runwildsafarisafrica.com/intesa_2022/riferimento/66c971c2282ac8a15ce66a763265eeef/763d666fa99114aa84471d840319f7dc/mobile/login
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
age: 0
cache-control: public, max-age=0, must-revalidate
content-encoding: br
content-type: application/javascript; charset=UTF-8
date: Wed, 30 Nov 2022 01:25:16 GMT
etag: "ea9e4185170d239b51b8e263b63212b3-ssl-df"
server: Netlify
strict-transport-security: max-age=31536000
vary: Accept-Encoding
x-nf-request-id: 01GK326PKCSKEEVFFDHH62AQTM
content-length: 649
X-Firefox-Spdy: h2
|
|
| www.runwildsafarisafrica.com/_next/static/chunks/webpack-109ee0ec97b458e6.js | 34.159.132.250 | 200 OK | 818 B |
URL HTTP/2www.runwildsafarisafrica.com/_next/static/chunks/webpack-109ee0ec97b458e6.js IP34.159.132.250:0 ASN#396982 GOOGLE-CLOUD-PLATFORM
File typeASCII text, with very long lines (1700), with no line terminators Hashf23fab37c1a8224dbe4b85daa544e1ac 0523b49166cd501bc5ce2f52d2ca5d410e6f10af ea2438d9d43961e469bcd5aad82bf73e4f682d9b731da87743059212577b4313
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /_next/static/chunks/webpack-109ee0ec97b458e6.js HTTP/1.1
Host: www.runwildsafarisafrica.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.runwildsafarisafrica.com/intesa_2022/riferimento/66c971c2282ac8a15ce66a763265eeef/763d666fa99114aa84471d840319f7dc/mobile/login
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
age: 0
cache-control: public, max-age=0, must-revalidate
content-encoding: br
content-type: application/javascript; charset=UTF-8
date: Wed, 30 Nov 2022 01:25:16 GMT
etag: "73c13d852cbde7080188988391c5c9e4-ssl-df"
server: Netlify
strict-transport-security: max-age=31536000
vary: Accept-Encoding
x-nf-request-id: 01GK326PK7ASJXVJ03TECXQVYF
content-length: 818
X-Firefox-Spdy: h2
|
|
| push.services.mozilla.com/ | 52.89.114.252 | 101 Switching Protocols | 0 B |
URL HTTP/1.1push.services.mozilla.com/ IP52.89.114.252:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: UPKM/DQ25WFyEo+fwZT5aA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: tB7yteAyLVr7jft/tXNNZ0LH8zw=
|
|
| www.runwildsafarisafrica.com/fonts/source-sans-pro-v21-latin-regular.woff2 | 34.159.132.250 | 200 OK | 13 kB |
URL HTTP/2www.runwildsafarisafrica.com/fonts/source-sans-pro-v21-latin-regular.woff2 IP34.159.132.250:0 ASN#396982 GOOGLE-CLOUD-PLATFORM
File typeWeb Open Font Format (Version 2), TrueType, length 13036, version 1.0\012- data Hash0ad032b3d07aaf33b160ac4799dda40f 06b931e0d0bf37f5037d9e66d6feedfddd21c0ba c124c88ca4fcb4336e97617647ef0d32441329371120c8eabaea0fea226560b0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /fonts/source-sans-pro-v21-latin-regular.woff2 HTTP/1.1
Host: www.runwildsafarisafrica.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.runwildsafarisafrica.com/_next/static/css/f2c2487d939cfd6a.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
age: 0
cache-control: public, max-age=0, must-revalidate
content-type: font/woff2
date: Wed, 30 Nov 2022 01:25:16 GMT
etag: "5f6c54a7af2a32431a66de611f9df618-ssl"
server: Netlify
strict-transport-security: max-age=31536000
x-nf-request-id: 01GK326PX9F2R40ZJQR3XN3V65
content-length: 13036
X-Firefox-Spdy: h2
|
|
| www.runwildsafarisafrica.com/favicon.ico | 34.159.132.250 | 200 OK | 1.2 kB |
URL HTTP/2www.runwildsafarisafrica.com/favicon.ico IP34.159.132.250:0 ASN#396982 GOOGLE-CLOUD-PLATFORM
File typeMS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data Hash8ed6a33157f8de6d2f2409917f3de43d 0a8b8285158144e9459e6938bf920256a9323469 aced5716d1580dfaa997bf9de640ac4b219b208145d9ae6af8120ad526c80db7
GET /favicon.ico HTTP/1.1
Host: www.runwildsafarisafrica.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.runwildsafarisafrica.com/intesa_2022/riferimento/66c971c2282ac8a15ce66a763265eeef/763d666fa99114aa84471d840319f7dc/mobile/login
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
age: 0
cache-control: public, max-age=0, must-revalidate
content-type: image/vnd.microsoft.icon
date: Wed, 30 Nov 2022 01:25:16 GMT
etag: "7fdbdc23b16ae7ac937c043f34f1ba9f-ssl"
server: Netlify
strict-transport-security: max-age=31536000
x-nf-request-id: 01GK326PX727X1H64ZH34WG7VV
content-length: 1150
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hashac3edd07bb0a4ebdaae6ec26e91d2079 b6efe3811dfa37cdcde1e9d411c171732ac7e12a c5dbd471d178ae4505b28e30aee1e8eed77fffd81b9f7815ad2bda1a0d09a02c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C5DBD471D178AE4505B28E30AEE1E8EED77FFFD81B9F7815AD2BDA1A0D09A02C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3085
Expires: Wed, 30 Nov 2022 02:16:43 GMT
Date: Wed, 30 Nov 2022 01:25:18 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hashac3edd07bb0a4ebdaae6ec26e91d2079 b6efe3811dfa37cdcde1e9d411c171732ac7e12a c5dbd471d178ae4505b28e30aee1e8eed77fffd81b9f7815ad2bda1a0d09a02c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C5DBD471D178AE4505B28E30AEE1E8EED77FFFD81B9F7815AD2BDA1A0D09A02C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3085
Expires: Wed, 30 Nov 2022 02:16:43 GMT
Date: Wed, 30 Nov 2022 01:25:18 GMT
Connection: keep-alive
|
|
| www.runwildsafarisafrica.com/_next/static/chunks/main-017a64f48d901a37.js | 34.159.132.250 | 200 OK | 41 kB |
URL HTTP/2www.runwildsafarisafrica.com/_next/static/chunks/main-017a64f48d901a37.js IP34.159.132.250:0 ASN#396982 GOOGLE-CLOUD-PLATFORM
File typeASCII text, with very long lines (65536), with no line terminators Hash78cbccb3756550d8737d4f75a2a4802b 027e65caf2cc49c9365a04f2e38b1ce3192a763c 3d455c5634fbc16562418423e3a6a0a0554a43d568aed1c41ad9911f1712352c
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /_next/static/chunks/main-017a64f48d901a37.js HTTP/1.1
Host: www.runwildsafarisafrica.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.runwildsafarisafrica.com/intesa_2022/riferimento/66c971c2282ac8a15ce66a763265eeef/763d666fa99114aa84471d840319f7dc/mobile/login
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
age: 0
cache-control: public, max-age=0, must-revalidate
content-encoding: br
content-type: application/javascript; charset=UTF-8
date: Wed, 30 Nov 2022 01:25:16 GMT
etag: "b780f92d0a95630d56255651bb4b766a-ssl-df"
server: Netlify
strict-transport-security: max-age=31536000
vary: Accept-Encoding
x-nf-request-id: 01GK326PKAKDN5JPZ8ARJ5BKM4
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F37883a10-064d-451d-9dd4-bca0a5594e96.jpeg | 34.120.237.76 | 200 OK | 12 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F37883a10-064d-451d-9dd4-bca0a5594e96.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash0c14828912decf19c9d95fee93e92f00 49a82390cbf2139bf681d896f9467ab736e0b337 bbafc9bd160a30c6a31954bdf66655e1decc59dead3bb94c6fa21cad1cd56fe3
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F37883a10-064d-451d-9dd4-bca0a5594e96.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11466
x-amzn-requestid: 40ae63d3-397e-4118-90b2-d48b1f4014c4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cYgDaHUxIAMFxWA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63867a15-2b309a0a5e93f68312a26fa1;Sampled=0
x-amzn-remapped-date: Tue, 29 Nov 2022 21:31:01 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: G2_x26WJ_ISQDsWfV3RzC_jCy5FLNLpblRk_GvuCn4i-ETBAsaKBjQ==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 9046e5a276a05e60ee34c8475e92b8e6.cloudfront.net (CloudFront), 1.1 google
date: Tue, 29 Nov 2022 21:52:45 GMT
age: 12753
etag: "49a82390cbf2139bf681d896f9467ab736e0b337"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| www.runwildsafarisafrica.com/_next/static/chunks/framework-fe99aa755573eedd.js | 34.159.132.250 | 200 OK | 53 kB |
URL HTTP/2www.runwildsafarisafrica.com/_next/static/chunks/framework-fe99aa755573eedd.js IP34.159.132.250:0 ASN#396982 GOOGLE-CLOUD-PLATFORM
File typeASCII text, with very long lines (65202) Hash83095e2da87b20f681923df9fa268ca8 e52b30c1904a8ae427195824d015f4a81d551495 6b3987d81ffe291ecd5340ccd5937de6786c50f8f96fb0e8c103da4b7a354c3a
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /_next/static/chunks/framework-fe99aa755573eedd.js HTTP/1.1
Host: www.runwildsafarisafrica.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.runwildsafarisafrica.com/intesa_2022/riferimento/66c971c2282ac8a15ce66a763265eeef/763d666fa99114aa84471d840319f7dc/mobile/login
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
age: 0
cache-control: public, max-age=0, must-revalidate
content-encoding: br
content-type: application/javascript; charset=UTF-8
date: Wed, 30 Nov 2022 01:25:16 GMT
etag: "b2cba757f1e438279db8657ddcd6ccbe-ssl-df"
server: Netlify
strict-transport-security: max-age=31536000
vary: Accept-Encoding
x-nf-request-id: 01GK326PK86PJMVKG06EGTF54Q
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F966ff24e-ea85-4a2e-aead-22f1a723c59f.jpeg | 34.120.237.76 | 200 OK | 9.7 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F966ff24e-ea85-4a2e-aead-22f1a723c59f.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash5508d05a290b663fd89ead9b58f2efd8 53650399f9a986ba54addd668b4557109d12003b 65704a961410fdd318c491fedf002c8e9b184cd34b76fe1b67026d42ce21be3f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F966ff24e-ea85-4a2e-aead-22f1a723c59f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9674
x-amzn-requestid: 7e7d0183-9667-462a-8d44-d125998c1ae3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cYgEoHVAoAMFvAQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63867a1d-280ba97e3fe1bf7244cbde35;Sampled=0
x-amzn-remapped-date: Tue, 29 Nov 2022 21:31:09 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: ym_L3s5E6MLy6BxqNkVxok6L6hA4c-ilSsEqt42j2IbiXYPb4c6-VQ==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 6a9b42e38e76b7d4a4044ebe0e0eca08.cloudfront.net (CloudFront), 1.1 google
date: Tue, 29 Nov 2022 21:52:51 GMT
age: 12747
etag: "53650399f9a986ba54addd668b4557109d12003b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd170538c-f8cf-4acb-ba33-2ead00b9db73.jpeg | 34.120.237.76 | 200 OK | 11 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd170538c-f8cf-4acb-ba33-2ead00b9db73.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash777ce44582c70bf01a31da4cab366f36 57e1d34f146d5ccd9943aa97bcc3158f7103bb07 fbdc8f65ae74dc13b7aafec464f08fdc9902af519946200ec52432ac3ca55982
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd170538c-f8cf-4acb-ba33-2ead00b9db73.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10958
x-amzn-requestid: abfea5b0-58f5-49e1-b78e-7cf456d03cb3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cYgFHF9oIAMF5lg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63867a20-5ab719292d440d083b07a478;Sampled=0
x-amzn-remapped-date: Tue, 29 Nov 2022 21:31:12 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: gCt9oHpZ68tLCYHIYpI1XLtADkScxwf12kDFnU0o5WoQIVSzWlqozw==
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 570075675953459325e00b7bcd171df2.cloudfront.net (CloudFront), 1.1 google
date: Tue, 29 Nov 2022 22:16:52 GMT
etag: "57e1d34f146d5ccd9943aa97bcc3158f7103bb07"
content-type: image/jpeg
age: 11306
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fde294fb7-e851-4e57-83be-aa3374862dcb.jpeg | 34.120.237.76 | 200 OK | 8.0 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fde294fb7-e851-4e57-83be-aa3374862dcb.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash9e135c29a8769eb12ef8c26f99097400 87447d20e9c0a6a6aeefe6ca107f93cd3598cd0d ce41ff79c382efc54aa2fd3ab64293d2d2b706a7f21585f4bd8bbcd9a3566126
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fde294fb7-e851-4e57-83be-aa3374862dcb.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7971
x-amzn-requestid: e47d10e4-2b60-4998-b5fa-5b145e60aac2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cYhgWHgGoAMFcLA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63867c68-5b9710a07b0a59730e73dce4;Sampled=0
x-amzn-remapped-date: Tue, 29 Nov 2022 21:40:56 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: OURSF_raDXrHV3-3ScaEdorNpW9ZKSIQjv6WUCQYHhruGz372BU_QA==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 be082a2326b7d49643607b097f1e7180.cloudfront.net (CloudFront), 1.1 google
date: Tue, 29 Nov 2022 21:58:15 GMT
age: 12423
etag: "87447d20e9c0a6a6aeefe6ca107f93cd3598cd0d"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| www.runwildsafarisafrica.com/_next/static/chunks/pages/_app-11d1a05a20fe8f4d.js | 34.159.132.250 | 200 OK | 0 B |
URL HTTP/2www.runwildsafarisafrica.com/_next/static/chunks/pages/_app-11d1a05a20fe8f4d.js IP34.159.132.250:0 ASN#396982 GOOGLE-CLOUD-PLATFORM
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /_next/static/chunks/pages/_app-11d1a05a20fe8f4d.js HTTP/1.1
Host: www.runwildsafarisafrica.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.runwildsafarisafrica.com/intesa_2022/riferimento/66c971c2282ac8a15ce66a763265eeef/763d666fa99114aa84471d840319f7dc/mobile/login
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
age: 0
cache-control: public, max-age=0, must-revalidate
content-encoding: br
content-type: application/javascript; charset=UTF-8
date: Wed, 30 Nov 2022 01:25:16 GMT
etag: "353d0398163294b6bee26c8905101e2d-ssl-df"
server: Netlify
strict-transport-security: max-age=31536000
vary: Accept-Encoding
x-nf-request-id: 01GK326PKBMGMWZAX5JW6HC9EA
X-Firefox-Spdy: h2
|
|
| www.runwildsafarisafrica.com/intesa_2022/riferimento/66c971c2282ac8a15ce66a763265eeef/763d666fa99114aa84471d840319f7dc/mobile/login | 34.159.132.250 | 404 Not Found | 0 B |
URL HTTP/2www.runwildsafarisafrica.com/intesa_2022/riferimento/66c971c2282ac8a15ce66a763265eeef/763d666fa99114aa84471d840319f7dc/mobile/login IP34.159.132.250:0 ASN#396982 GOOGLE-CLOUD-PLATFORM
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /intesa_2022/riferimento/66c971c2282ac8a15ce66a763265eeef/763d666fa99114aa84471d840319f7dc/mobile/login HTTP/1.1
Host: www.runwildsafarisafrica.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 404 Not Found
age: 0
cache-control: no-cache
content-encoding: br
content-type: text/html; charset=utf-8
date: Wed, 30 Nov 2022 01:25:16 GMT
etag: "d4fyik9jwn3mp-df"
server: Netlify
strict-transport-security: max-age=31536000
vary: Accept-Encoding
x-nf-render-mode: ssr
x-nf-request-id: 01GK326P5W9TSM40XVAREYVPWW
x-powered-by: Next.js
X-Firefox-Spdy: h2
|
|
| www.runwildsafarisafrica.com/_next/static/css/f2c2487d939cfd6a.css | 34.159.132.250 | 200 OK | 0 B |
URL HTTP/2www.runwildsafarisafrica.com/_next/static/css/f2c2487d939cfd6a.css IP34.159.132.250:0 ASN#396982 GOOGLE-CLOUD-PLATFORM
GET /_next/static/css/f2c2487d939cfd6a.css HTTP/1.1
Host: www.runwildsafarisafrica.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.runwildsafarisafrica.com/intesa_2022/riferimento/66c971c2282ac8a15ce66a763265eeef/763d666fa99114aa84471d840319f7dc/mobile/login
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
age: 0
cache-control: public, max-age=0, must-revalidate
content-encoding: br
content-type: text/css; charset=UTF-8
date: Wed, 30 Nov 2022 01:25:16 GMT
etag: "933cfa191c63bece8fd51545539d89ed-ssl-df"
server: Netlify
strict-transport-security: max-age=31536000
vary: Accept-Encoding
x-nf-request-id: 01GK326PK6MMA77THW34NCW49T
X-Firefox-Spdy: h2
|
|