vodafone-internet.it/
200 OK 8.0 kB IP
ASN #52030 Server Plan S.r.l.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (387), with CRLF line terminators
Hash b63d83d295a4e8adf9d4da63bd11cc7d
3938c614634eb196598f5730b4199328670da1af
c29a1cfa982e112dde601a9fb73ecb8c567362130056cf19a235b2da583e6579
Analyzer Verdict Alert openphish Vodafone
fortinet Phishing
GET / HTTP/1.1
Host: vodafone-internet.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
last-modified: Thu, 09 Mar 2023 22:59:59 GMT
etag: "1802d4-9a88-5f67f9aa698d6-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 7987
content-type: text/html
date: Sat, 11 Mar 2023 17:48:45 GMT
server: Apache
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 9ce33c47154f4826255fe9bbe54d72be
e10a363c007a6d15ed43eb35b4e5c246d85c5eed
cf423db1a8ad1dce1b5c25f6025d14411b4a46e95a6001288949f046e244bc24
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "CF423DB1A8AD1DCE1B5C25F6025D14411B4A46E95A6001288949F046E244BC24"
Last-Modified: Fri, 10 Mar 2023 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17328
Expires: Sat, 11 Mar 2023 22:37:33 GMT
Date: Sat, 11 Mar 2023 17:48:45 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 88c2e33504e05b0bc2b7a3502d6a79bb
23881a1edb8d8ff3dc2192d25792a59fa2c96088
dfbfefeab7d314e54f5e5f2e48ba645817da6dee3ee2bc5abdbaac81b8dc66e7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DFBFEFEAB7D314E54F5E5F2E48BA645817DA6DEE3EE2BC5ABDBAAC81B8DC66E7"
Last-Modified: Thu, 09 Mar 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16847
Expires: Sat, 11 Mar 2023 22:29:32 GMT
Date: Sat, 11 Mar 2023 17:48:45 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 33723bd3cb2d70f8f86442863df61ec1
ee9f60025e885c09ff570c4e8f641bcc25ff83f0
dc794aeea289e16c4f217e2e3379cc434b6071badbf9ab6d64884707eafee538
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DC794AEEA289E16C4F217E2E3379CC434B6071BADBF9AB6D64884707EAFEE538"
Last-Modified: Thu, 09 Mar 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4721
Expires: Sat, 11 Mar 2023 19:07:26 GMT
Date: Sat, 11 Mar 2023 17:48:45 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 84db75194692d4afe13196bda6f22da8
4c1f49bc973a4917f146d93c8d598344edc021f6
a3bec66f95b3bdf1d310c726e8ed05f7b06c1901c62381a94582d581844d2c23
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Backoff, Alert, Content-Length, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sat, 11 Mar 2023 17:13:52 GMT
content-type: application/json
age: 2093
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-09-20-28-26.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-09-20-28-26.chain
IP
File type PEM certificate\012- , ASCII text
Hash b5ba6334e73496995e3e3a9ecd0eb323
ad80d3b7718c28364e8c2004fb38a13a1747e462
aa5abb52515c6383c014aadb63a86c9f798ad64de53c0218616c1fc6d424d2e2
GET /chains/remote-settings.content-signature.mozilla.org-2023-04-09-20-28-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: ZfFe4HKYT/f56xUTgge/rA61D4vyagoR8Ek0T7+bh+VIsWAUThp6iugoVxreAgvW52CdRdJil/8=
x-amz-request-id: 1KZRNGG08JBTEPVE
x-amz-server-side-encryption: AES256
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sat, 11 Mar 2023 17:19:22 GMT
age: 1763
last-modified: Sat, 18 Feb 2023 20:28:27 GMT
etag: "b5ba6334e73496995e3e3a9ecd0eb323"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 11 Mar 2023 17:48:45 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
vodafone-internet.it/img/icozerocosti.png
200 OK 5.9 kB URL HTTP/2 vodafone-internet.it/img/icozerocosti.png
IP
ASN #52030 Server Plan S.r.l.
File type PNG image data, 168 x 168, 8-bit/color RGBA, non-interlaced\012- data
Hash 258cd9f92bcc11d18deb3a3d6f89151c
3d9780e34560b0cc97d34d1d55416c5d58a6ac36
685c5b78f75f09da6e9f89c1380ef0431fed8c9a9649e4c39356026704277f43
Analyzer Verdict Alert openphish Vodafone
GET /img/icozerocosti.png HTTP/1.1
Host: vodafone-internet.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vodafone-internet.it/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 28 Jun 2022 19:22:36 GMT
etag: "181a16-171c-5e286f5823700"
accept-ranges: bytes
content-length: 5916
content-type: image/png
date: Sat, 11 Mar 2023 17:48:45 GMT
server: Apache
X-Firefox-Spdy: h2
vodafone-internet.it/css/landing-page.min.css
200 OK 642 B URL HTTP/2 vodafone-internet.it/css/landing-page.min.css
IP
ASN #52030 Server Plan S.r.l.
File type ASCII text, with very long lines (1656)
Hash 824936d72c7a93cee79c49b69c6711e9
eac13fda862da1636ac104977f9e98858cbd665c
1da5aa57c4d78eebe2295aa8faefaf3e9027f572adeedb6e9bb27dbfc5611bb8
Analyzer Verdict Alert openphish Vodafone
GET /css/landing-page.min.css HTTP/1.1
Host: vodafone-internet.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vodafone-internet.it/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 06 Jul 2022 23:29:24 GMT
etag: "1819e7-766-5e32b56e153c3-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 642
content-type: text/css
date: Sat, 11 Mar 2023 17:48:45 GMT
server: Apache
X-Firefox-Spdy: h2
vodafone-internet.it/img/insieme.png
200 OK 3.0 kB URL HTTP/2 vodafone-internet.it/img/insieme.png
IP
ASN #52030 Server Plan S.r.l.
File type PNG image data, 144 x 144, 8-bit/color RGBA, non-interlaced\012- data
Hash 7eb9a8810a5a45a5771b85c523b469c7
f6b223015946789663f3f5dc6e7c3e6383985a18
5f071d6247717e871019a3bb1c5a9d14dc21c4756a058dcbaf0f800662d08dc0
Analyzer Verdict Alert openphish Vodafone
GET /img/insieme.png HTTP/1.1
Host: vodafone-internet.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vodafone-internet.it/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 14 Nov 2022 11:51:16 GMT
etag: "181a17-be3-5ed6cdb61ee35"
accept-ranges: bytes
content-length: 3043
content-type: image/png
date: Sat, 11 Mar 2023 17:48:45 GMT
server: Apache
X-Firefox-Spdy: h2
vodafone-internet.it/img/Fwa.png
200 OK 2.6 kB URL HTTP/2 vodafone-internet.it/img/Fwa.png
IP
ASN #52030 Server Plan S.r.l.
File type PNG image data, 108 x 108, 8-bit/color RGBA, non-interlaced\012- data
Hash ae4edf2d94b4123d60ee99d94f3c6d88
de0cc335f401e5acbd5b3253e9f74585ca8ce60f
6e96ef71d6ffb55468d68477ee86c90d556233c009f775ab6869dfa4151aa4e1
Analyzer Verdict Alert openphish Vodafone
GET /img/Fwa.png HTTP/1.1
Host: vodafone-internet.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vodafone-internet.it/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 23 Sep 2022 09:07:53 GMT
etag: "1819e8-9fa-5e954835cbeb1"
accept-ranges: bytes
content-length: 2554
content-type: image/png
date: Sat, 11 Mar 2023 17:48:45 GMT
server: Apache
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 053ab0d7591100985af7730b2101b91e
6d6f10dc2b951cfdc6d24246d43e20cd9fbc3cce
1794588a9797a244f73dd94fbd745b5b098f21062331d70a0621deb615a9cff7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 11 Mar 2023 17:48:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 20470d5fd640d3d4d8042ddda330f27d
aefe4f86f721798d3bbc5665407dcbc6f58eed04
7c3a90597eb9aed4d33784ba453896512f57985b6c1fc4b65f1f23e8b4ae1c60
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7C3A90597EB9AED4D33784BA453896512F57985B6C1FC4B65F1F23E8B4AE1C60"
Last-Modified: Sat, 11 Mar 2023 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4861
Expires: Sat, 11 Mar 2023 19:09:46 GMT
Date: Sat, 11 Mar 2023 17:48:45 GMT
Connection: keep-alive
vodafone-internet.it/img/unlimited.png
200 OK 998 B URL HTTP/2 vodafone-internet.it/img/unlimited.png
IP
ASN #52030 Server Plan S.r.l.
File type PNG image data, 36 x 36, 8-bit/color RGBA, non-interlaced\012- data
Hash dda6c80d05006e0950bd4d4f5e04fe45
b8424b92699585d3c90977bd25a3a374f5cbf082
8c62684e5e54c94d701c2cd9e611d371415ae5d4a44fbb38cf4ebeff92ed3144
Analyzer Verdict Alert openphish Vodafone
GET /img/unlimited.png HTTP/1.1
Host: vodafone-internet.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vodafone-internet.it/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 25 Oct 2022 09:52:44 GMT
etag: "181a25-3e6-5ebd8de9ffe6d"
accept-ranges: bytes
content-length: 998
content-type: image/png
date: Sat, 11 Mar 2023 17:48:45 GMT
server: Apache
X-Firefox-Spdy: h2
vodafone-internet.it/card/css/main.css
200 OK 2.7 kB URL HTTP/2 vodafone-internet.it/card/css/main.css
IP
ASN #52030 Server Plan S.r.l.
Hash 9ffb60a0fde86e169a1edeeb7b2e7e94
cedebafcc38c9fef9c331ef6bace04ea92f3093b
243e1336a1ea999260316d080806a776a8029861dd917e29d90d24dcb90c161a
Analyzer Verdict Alert openphish Vodafone
GET /card/css/main.css HTTP/1.1
Host: vodafone-internet.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vodafone-internet.it/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 09 Mar 2023 09:56:01 GMT
etag: "1802fd-3165-5f674a6fc8556-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 2668
content-type: text/css
date: Sat, 11 Mar 2023 17:48:45 GMT
server: Apache
X-Firefox-Spdy: h2
vodafone-internet.it/img/vodafonelogo.svg
200 OK 923 B URL HTTP/2 vodafone-internet.it/img/vodafonelogo.svg
IP
ASN #52030 Server Plan S.r.l.
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document, ASCII text, with very long lines (1380)
Hash 8eb7ec6d1d8273ba746e32e3d0613bba
59c7fedbd6ac3d8feade5f54b49066d8814b16e0
35f176b47d4281d20e7c453361ad3996b8caaeff47189e2a4abe78fc5908ad35
Analyzer Verdict Alert openphish Vodafone
fortinet Phishing
GET /img/vodafonelogo.svg HTTP/1.1
Host: vodafone-internet.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vodafone-internet.it/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 24 Feb 2023 19:57:27 GMT
etag: "180f5e-96d-5f57789ec980c-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 923
content-type: image/svg+xml
date: Sat, 11 Mar 2023 17:48:45 GMT
server: Apache
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=AW-10935671887
200 OK 66 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=AW-10935671887
IP
File type ASCII text, with very long lines (4737)
Hash 85ed91d04a32ad2a2bf633de2d18c069
7d806101e6f76af7276370d57fd161f8448bd1f7
54c35aa39305d75cd6b28cf218b0ab26490557477fd2c81748483da0e9587831
GET /gtag/js?id=AW-10935671887 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vodafone-internet.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sat, 11 Mar 2023 17:48:45 GMT
expires: Sat, 11 Mar 2023 17:48:45 GMT
cache-control: private, max-age=900
last-modified: Sat, 11 Mar 2023 15:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 66477
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
vodafone-internet.it/vendor/bootstrap/css/bootstrap.min.css
200 OK 24 kB URL HTTP/2 vodafone-internet.it/vendor/bootstrap/css/bootstrap.min.css
IP
ASN #52030 Server Plan S.r.l.
File type ASCII text, with very long lines (65326)
Hash 89615fe7d49bd6546a64456a7d3c804d
6470bc374c9380960a0c4acf54f8ecd1a9f9faaf
271463e90b4fb1cc2c58c80f122c0b3714cf13ab6e6ca94d477e4ea51644396a
Analyzer Verdict Alert openphish Vodafone
GET /vendor/bootstrap/css/bootstrap.min.css HTTP/1.1
Host: vodafone-internet.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vodafone-internet.it/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 28 Jun 2022 19:22:36 GMT
etag: "1a073c-27288-5e286f5823700-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 23916
content-type: text/css
date: Sat, 11 Mar 2023 17:48:45 GMT
server: Apache
X-Firefox-Spdy: h2
vodafone-internet.it/vendor/jquery/jquery.min.js
200 OK 31 kB URL HTTP/2 vodafone-internet.it/vendor/jquery/jquery.min.js
IP
ASN #52030 Server Plan S.r.l.
File type ASCII text, with very long lines (65451)
Hash 888c5fa4504182a0224b264a1fda0e73
65f058a7dead59a8063362241865526eb0148f16
7d757e510b1f0c4d44fd98cc0121da8ca4f44793f8583debdef300fb1dbd3715
Analyzer Verdict Alert openphish Vodafone
fortinet Phishing
GET /vendor/jquery/jquery.min.js HTTP/1.1
Host: vodafone-internet.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vodafone-internet.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 28 Jun 2022 19:22:38 GMT
etag: "1a0763-15d84-5e286f5a0bb80-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 30910
content-type: application/javascript
date: Sat, 11 Mar 2023 17:48:45 GMT
server: Apache
X-Firefox-Spdy: h2
vodafone-internet.it/img/semplice.png
200 OK 3.7 kB URL HTTP/2 vodafone-internet.it/img/semplice.png
IP
ASN #52030 Server Plan S.r.l.
File type PNG image data, 171 x 168, 8-bit colormap, interlaced\012- data
Hash 13b24c13ef5824f3b20052cc0e362719
e04b9ee99a273dc983647096edc260a65a8546ce
8c3214f6a4024e08b74f349aea9bc3e24ee5725cbd062447f3593499abb3837c
Analyzer Verdict Alert openphish Vodafone
GET /img/semplice.png HTTP/1.1
Host: vodafone-internet.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vodafone-internet.it/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 28 Jun 2022 19:34:42 GMT
etag: "181a20-e42-5e28720c81880"
accept-ranges: bytes
content-length: 3650
content-type: image/png
date: Sat, 11 Mar 2023 17:48:45 GMT
server: Apache
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 053ab0d7591100985af7730b2101b91e
6d6f10dc2b951cfdc6d24246d43e20cd9fbc3cce
1794588a9797a244f73dd94fbd745b5b098f21062331d70a0621deb615a9cff7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 11 Mar 2023 17:48:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
vodafone-internet.it/card/vendor/jquery/jquery.min.js
200 OK 30 kB URL HTTP/2 vodafone-internet.it/card/vendor/jquery/jquery.min.js
IP
ASN #52030 Server Plan S.r.l.
File type ASCII text, with very long lines (32058), with CRLF line terminators
Hash 9be8097803999b702fa83ec17dd66984
283299e8c5a59c73e949e4a275e0a70f9cf08f9f
c3702d18d04969c4d2c56a024a957ed897ec418bc15d66cea9eca0f1101a0c48
Analyzer Verdict Alert openphish Vodafone
fortinet Phishing
GET /card/vendor/jquery/jquery.min.js HTTP/1.1
Host: vodafone-internet.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vodafone-internet.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 28 Jun 2022 19:22:36 GMT
etag: "1a0729-15287-5e286f5823700-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 30147
content-type: application/javascript
date: Sat, 11 Mar 2023 17:48:45 GMT
server: Apache
X-Firefox-Spdy: h2
vodafone-internet.it/card/vendor/bootstrap-wizard/jquery.bootstrap.wizard.min.js
200 OK 1.8 kB URL HTTP/2 vodafone-internet.it/card/vendor/bootstrap-wizard/jquery.bootstrap.wizard.min.js
IP
ASN #52030 Server Plan S.r.l.
File type ASCII text, with very long lines (527)
Hash fb49ce276a061600e0d3585b3c5e2644
9d383bdc48d9408afcc7b21a5710d878b9196a58
13c195dc6855c6a873e395a160137c55f029920133c41b713c6e905710e1a4de
Analyzer Verdict Alert openphish Vodafone
fortinet Phishing
GET /card/vendor/bootstrap-wizard/jquery.bootstrap.wizard.min.js HTTP/1.1
Host: vodafone-internet.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vodafone-internet.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 28 Jun 2022 19:22:36 GMT
etag: "1819e3-1b05-5e286f5823700-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 1842
content-type: application/javascript
date: Sat, 11 Mar 2023 17:48:45 GMT
server: Apache
X-Firefox-Spdy: h2
vodafone-internet.it/card/vendor/jquery-validate/jquery.validate.min.js
200 OK 7.5 kB URL HTTP/2 vodafone-internet.it/card/vendor/jquery-validate/jquery.validate.min.js
IP
ASN #52030 Server Plan S.r.l.
File type Unicode text, UTF-8 text, with very long lines (23122)
Hash a658066e859d78ed3e8e9a6cc59ada04
ebafea8979cd5e63c4ab252364a3cf7653008457
b1c168c4f75a6107b7e7b4e0b747a69203e3f9ec55996d9e7a9bf41daf4be8b2
Analyzer Verdict Alert openphish Vodafone
fortinet Phishing
GET /card/vendor/jquery-validate/jquery.validate.min.js HTTP/1.1
Host: vodafone-internet.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vodafone-internet.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 28 Jun 2022 19:22:36 GMT
etag: "1a0727-5add-5e286f5823700-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 7502
content-type: application/javascript
date: Sat, 11 Mar 2023 17:48:45 GMT
server: Apache
X-Firefox-Spdy: h2
vodafone-internet.it/card/vendor/bootstrap-wizard/bootstrap.min.js
200 OK 9.2 kB URL HTTP/2 vodafone-internet.it/card/vendor/bootstrap-wizard/bootstrap.min.js
IP
ASN #52030 Server Plan S.r.l.
File type ASCII text, with very long lines (32108)
Hash fd7ee4bc8f21678e6962e3ea808e0e8d
329e5ca00433bac4bff49e1bd27de4c636d12700
06a1da7ad3af90ac203629fbd8f4a5741f103f721aae847c8f70329a8ac20262
Analyzer Verdict Alert openphish Vodafone
fortinet Phishing
GET /card/vendor/bootstrap-wizard/bootstrap.min.js HTTP/1.1
Host: vodafone-internet.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vodafone-internet.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 28 Jun 2022 19:22:36 GMT
etag: "1819e1-875d-5e286f5823700-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 9223
content-type: application/javascript
date: Sat, 11 Mar 2023 17:48:45 GMT
server: Apache
X-Firefox-Spdy: h2
vodafone-internet.it/card/js/global.js
200 OK 424 B URL HTTP/2 vodafone-internet.it/card/js/global.js
IP
ASN #52030 Server Plan S.r.l.
File type ASCII text, with CRLF line terminators
Hash ce77990a3dacdf6cb8e02dc9aa4261ff
4f8668a85c7d6c5b1a7bbb9d6a94592128e22de1
21dc0f4b5c10b611741ff8d55e1271c5111616d54c52adb1ca39e229150fdc80
Analyzer Verdict Alert openphish Vodafone
fortinet Phishing
GET /card/js/global.js HTTP/1.1
Host: vodafone-internet.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vodafone-internet.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 28 Jun 2022 19:22:36 GMT
etag: "1819e0-5fa-5e286f5823700-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 424
content-type: application/javascript
date: Sat, 11 Mar 2023 17:48:45 GMT
server: Apache
X-Firefox-Spdy: h2
vodafone-internet.it/vendor/bootstrap/js/bootstrap.bundle.min.js
200 OK 22 kB URL HTTP/2 vodafone-internet.it/vendor/bootstrap/js/bootstrap.bundle.min.js
IP
ASN #52030 Server Plan S.r.l.
File type ASCII text, with very long lines (65299)
Hash 740c84bdec4ddb8462c86a7a1e4b5e82
1f83ac50a77da1d784f9596466b436cce90bc774
73cfc5b732c42973cc81b5b0da06daf83db28921836ab79f1ce9046db162cbc0
Analyzer Verdict Alert openphish Vodafone
fortinet Phishing
GET /vendor/bootstrap/js/bootstrap.bundle.min.js HTTP/1.1
Host: vodafone-internet.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vodafone-internet.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 28 Jun 2022 19:22:36 GMT
etag: "1a0740-148b8-5e286f5823700-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 21804
content-type: application/javascript
date: Sat, 11 Mar 2023 17:48:45 GMT
server: Apache
X-Firefox-Spdy: h2
vodafone-internet.it/img/V3.webp
200 OK 27 kB URL HTTP/2 vodafone-internet.it/img/V3.webp
IP
ASN #52030 Server Plan S.r.l.
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 1350x1440, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 66ae64a8e51949a1fc1734a90ba7a135
9c78e05ff378f59f0e0dc8eeada29153664b0f35
5a66c2d7d7e61e54c54f0fd2574158e83058c3a3144c92921b14259d3a90dafd
Analyzer Verdict Alert openphish Vodafone
fortinet Phishing
GET /img/V3.webp HTTP/1.1
Host: vodafone-internet.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vodafone-internet.it/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 27 Oct 2022 18:54:05 GMT
etag: "1819ea-6f66-5ec08aa570dd1-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 27005
content-type: image/webp
date: Sat, 11 Mar 2023 17:48:45 GMT
server: Apache
X-Firefox-Spdy: h2
u.heatmap.it/log.js
200 OK 10 kB IP
File type Unicode text, UTF-8 text, with very long lines (27372)
Hash ed207286dd79ed2b7af3d5517760919c
f72e58e52b9227a81643259bf203a12e15cc59cc
4aa7c11c47a8361882eebb4c8b32e1f599d9d4ee173c68cfe874e1bda29b3a69
GET /log.js HTTP/1.1
Host: u.heatmap.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vodafone-internet.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 06 Mar 2023 15:04:51 GMT
last-modified: Sat, 19 Nov 2022 08:38:34 GMT
etag: "6378960a-6b2b"
expires: Mon, 06 Mar 2023 16:04:51 GMT
cache-control: max-age=3600
x-request-id: 608535235
content-type: application/javascript; charset=UTF-8
vary: Accept-Encoding
content-encoding: br
x-cdn-pop: sbg
x-cdn-pop-ip: 137.74.120.0/27
x-cacheable: Matched cache
accept-ranges: bytes
content-length: 10532
X-Firefox-Spdy: h2
u.heatmap.it/conf/vodafone-internet.it.js
200 OK 49 B URL HTTP/2 u.heatmap.it/conf/vodafone-internet.it.js
IP
Hash 9b893c730ca5ff9e7d84f5408fcd2475
1c53aea1f1e3c8354940cb22e0569efe9ca270cc
48c8632fbc0be95875166e4a3ef045abe6ad2a9e1ed68dfd116425e56d995599
GET /conf/vodafone-internet.it.js HTTP/1.1
Host: u.heatmap.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vodafone-internet.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 11 Mar 2023 17:23:35 GMT
content-type: text/javascript;charset=UTF-8
expires: Sat, 11 Mar 2023 17:28:35 GMT
cache-control: max-age=300
x-request-id: 212829317
content-encoding: br
x-grace: full
x-cdn-pop: sbg
x-cdn-pop-ip: 137.74.120.0/27
x-cacheable: Matched cache
accept-ranges: bytes
content-length: 49
X-Firefox-Spdy: h2
cdn.usefathom.com/?h=https%3A%2F%2Fvodafone-internet.it&p=%2F&r=&sid=YBYQZQOT&qs=%7B%7D&cid=60334845
200 OK 43 B URL HTTP/2 cdn.usefathom.com/?h=https%3A%2F%2Fvodafone-internet.it&p=%2F&r=&sid=YBYQZQOT&qs=%7B%7D&cid=60334845
IP
ASN #34989 ServeTheWorld AS
File type GIF image data, version 89a, 1 x 1\012- data
Hash 57f187c7a868faeac558007a8eb6cb2e
11ab10ab109fdb53d91d444ac781101f5a6360c6
aa03dc59bdca72631d2301e4297cfa030bd31b907dc138e7b973d12311c90a22
GET /?h=https%3A%2F%2Fvodafone-internet.it&p=%2F&r=&sid=YBYQZQOT&qs=%7B%7D&cid=60334845 HTTP/1.1
Host: cdn.usefathom.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vodafone-internet.it/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 11 Mar 2023 17:48:45 GMT
content-type: image/gif
content-length: 43
server: BunnyCDN-NO1-830
cdn-pullzone: 506217
cdn-uid: aa90c48b-f401-4fa1-aac1-c94c8f3ae560
cdn-requestcountrycode: NO
access-control-allow-origin: *
cache-control: public, max-age=0
pragma: no-cache
x-vapor-base64-encode: True
tk: N
cdn-proxyver: 1.03
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cdn-cachedat: 03/11/2023 17:48:45
cdn-edgestorageid: 830
cdn-status: 200
cdn-requestid: 076cc922f5676bcd96128f5dca002c09
cdn-cache: MISS
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Backoff, Pragma, Last-Modified, ETag, Retry-After, Cache-Control, Content-Type, Expires
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sat, 11 Mar 2023 17:06:46 GMT
age: 2519
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
vodafone-internet.it/img/favicon-152.png
200 OK 20 kB URL HTTP/2 vodafone-internet.it/img/favicon-152.png
IP
ASN #52030 Server Plan S.r.l.
File type PNG image data, 152 x 152, 8-bit/color RGBA, non-interlaced\012- data
Hash 529fef145268bc9971225261c2c8db01
48d5c5e6343d4b36dea64220149bc98a65c846e7
1e50b135bb62de3d2d3036e0f0014826bf9433c760534d81bf83bf50fd37ef96
Analyzer Verdict Alert openphish Vodafone
GET /img/favicon-152.png HTTP/1.1
Host: vodafone-internet.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vodafone-internet.it/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 16 Sep 2022 13:42:09 GMT
etag: "181a09-4e82-5e8cb87458083"
accept-ranges: bytes
content-length: 20098
content-type: image/png
date: Sat, 11 Mar 2023 17:48:46 GMT
server: Apache
X-Firefox-Spdy: h2
vodafone-internet.it/favicon.ico
200 OK 631 B URL HTTP/2 vodafone-internet.it/favicon.ico
IP
ASN #52030 Server Plan S.r.l.
File type PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced\012- data
Hash 4c0fcae0081fa020651a25843721e96c
e98ff3f0b66a24291119994af0071de52788aabf
49a6fe204061eed715bbc16b84d60de44f625a4234f777d2376947f4f6c732ba
Analyzer Verdict Alert openphish Vodafone
GET /favicon.ico HTTP/1.1
Host: vodafone-internet.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vodafone-internet.it/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 02 Jul 2022 09:20:33 GMT
etag: "1819d5-260-5e2cf03d4936f-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 631
content-type: image/x-icon
date: Sat, 11 Mar 2023 17:48:46 GMT
server: Apache
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 289c60b957a8a6a09989af100a31de56
52b989681cdbccaa618d4bb7feb2e60aca1878d7
585ec9af69793a53b60877a618cc42a26ea2eb96df03883a17d03f21611f82b1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 11 Mar 2023 17:48:46 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cookiehub.net/c2/f59855b3.js
200 OK 20 kB URL HTTP/2 cookiehub.net/c2/f59855b3.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 9cb60fd15a04bcc687e21540f89a4956
9280d95c196901c27f5511968dc2b8c989e67f01
c358332cd8ea5af6be7e43b6574b31fbd37723064768fd8c4253f0bc855a7a36
GET /c2/f59855b3.js HTTP/1.1
Host: cookiehub.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vodafone-internet.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
date: Sat, 11 Mar 2023 17:48:46 GMT
last-modified: Thu, 09 Mar 2023 10:42:11 GMT
etag: W/"e42af665577ffa9ccff67788439f7ca1"
x-amz-server-side-encryption: AES256
x-amz-version-id: Eg4K3t298G2jEppdde_EGm1OfOOAhmUT
server: AmazonS3
content-encoding: br
x-cache: Miss from cloudfront
via: 1.1 f66e3db0f0449307dba3fbf72bbf3bac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: oZuu22zt38YOdqgeSPfO310PHkSvQCAVqleCCIajsl5qiodFrm5mJA==
cache-control: max-age=86400
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d960a8d21b339ab0d7987e3b1eb16fdc
08d4430c549151295ee4e1dc8f24dbd3d9456b0b
522b75aa714f87a716a9a693a7c3ed1cab6e5b1725f20a67df46dec2967b5960
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "522B75AA714F87A716A9A693A7C3ED1CAB6E5B1725F20A67DF46DEC2967B5960"
Last-Modified: Thu, 09 Mar 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10304
Expires: Sat, 11 Mar 2023 20:40:30 GMT
Date: Sat, 11 Mar 2023 17:48:46 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 3c5612c5131d59819b60bcd3123fbe1e
86f82bfa3a20987ac256d2efd06dc95c0df285e8
00fc14cc05fb85329d10ee97f1c959244f274c67d56a37f4eb8006acd0e867bf
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 11 Mar 2023 17:48:46 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: QhztvnQh2pSp1KpC3Cfz3g==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: jCgaz23975R+7eZTbBbmS7VVuv0=
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 6a44384f34436ff10edfebe69c575a7b
1cf2c799e53ab815264ea2378d2e9802a7a5705e
c8853bb6951bd7857d9fed0ed5849d8e0757d0db7af2af271ceca189ad0686f3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 11 Mar 2023 17:48:46 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
pagead2.googlesyndication.com/pagead/landing?gcs=G100&gcd=G100&rnd=1559939607.1678556926&url=https%3A%2F%2Fvodafone-internet.it%2F>m=45be3360
200 OK 42 B URL HTTP/2 pagead2.googlesyndication.com/pagead/landing?gcs=G100&gcd=G100&rnd=1559939607.1678556926&url=https%3A%2F%2Fvodafone-internet.it%2F>m=45be3360
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
POST /pagead/landing?gcs=G100&gcd=G100&rnd=1559939607.1678556926&url=https%3A%2F%2Fvodafone-internet.it%2F>m=45be3360 HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://vodafone-internet.it
Connection: keep-alive
Referer: https://vodafone-internet.it/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sat, 11 Mar 2023 17:48:46 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
content-security-policy: script-src 'none'; object-src 'none'
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 6a44384f34436ff10edfebe69c575a7b
1cf2c799e53ab815264ea2378d2e9802a7a5705e
c8853bb6951bd7857d9fed0ed5849d8e0757d0db7af2af271ceca189ad0686f3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 11 Mar 2023 17:48:46 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 54939002388023971ddb6b7e7ad53403
21f73b23a35299dfbae64d57dd2762625a9a09f5
8f8b0574ea2dc28302dee0a9868c1c145f66a6735353d236a8bd024c624f55a1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8F8B0574EA2DC28302DEE0A9868C1C145F66A6735353D236A8BD024C624F55A1"
Last-Modified: Thu, 09 Mar 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4959
Expires: Sat, 11 Mar 2023 19:11:26 GMT
Date: Sat, 11 Mar 2023 17:48:47 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 54939002388023971ddb6b7e7ad53403
21f73b23a35299dfbae64d57dd2762625a9a09f5
8f8b0574ea2dc28302dee0a9868c1c145f66a6735353d236a8bd024c624f55a1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8F8B0574EA2DC28302DEE0A9868C1C145F66A6735353D236A8BD024C624F55A1"
Last-Modified: Thu, 09 Mar 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4959
Expires: Sat, 11 Mar 2023 19:11:26 GMT
Date: Sat, 11 Mar 2023 17:48:47 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 54939002388023971ddb6b7e7ad53403
21f73b23a35299dfbae64d57dd2762625a9a09f5
8f8b0574ea2dc28302dee0a9868c1c145f66a6735353d236a8bd024c624f55a1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8F8B0574EA2DC28302DEE0A9868C1C145F66A6735353D236A8BD024C624F55A1"
Last-Modified: Thu, 09 Mar 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4884
Expires: Sat, 11 Mar 2023 19:10:11 GMT
Date: Sat, 11 Mar 2023 17:48:47 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 54939002388023971ddb6b7e7ad53403
21f73b23a35299dfbae64d57dd2762625a9a09f5
8f8b0574ea2dc28302dee0a9868c1c145f66a6735353d236a8bd024c624f55a1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8F8B0574EA2DC28302DEE0A9868C1C145F66A6735353D236A8BD024C624F55A1"
Last-Modified: Thu, 09 Mar 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4884
Expires: Sat, 11 Mar 2023 19:10:11 GMT
Date: Sat, 11 Mar 2023 17:48:47 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 54939002388023971ddb6b7e7ad53403
21f73b23a35299dfbae64d57dd2762625a9a09f5
8f8b0574ea2dc28302dee0a9868c1c145f66a6735353d236a8bd024c624f55a1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8F8B0574EA2DC28302DEE0A9868C1C145F66A6735353D236A8BD024C624F55A1"
Last-Modified: Thu, 09 Mar 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4884
Expires: Sat, 11 Mar 2023 19:10:11 GMT
Date: Sat, 11 Mar 2023 17:48:47 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4a3e2fcb-dbf5-4fe9-a56c-b36d9c8bdd3b.gif
200 OK 510 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4a3e2fcb-dbf5-4fe9-a56c-b36d9c8bdd3b.gif
IP
File type GIF image data, version 89a, 296 x 148\012- data
Size 510 kB (509554 bytes)
Hash 8aaaf2f10ef3b4bdba0a3e87363f431a
2395f71c326974fad24daac2eae607dda08a2c26
2612bdecbf6dc5e349d69c92bd557d35b41b3672d361f343d19123d0ce72de9c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4a3e2fcb-dbf5-4fe9-a56c-b36d9c8bdd3b.gif HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 509554
x-amzn-requestid: 358fb422-72a7-4e2a-b173-2f57ec2b5f51
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: BfjO0HCGoAMFrrA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-64094bf8-2ac79d011c36a5ee28c36d64;Sampled=0
x-amzn-remapped-date: Thu, 09 Mar 2023 03:01:12 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Miss from cloudfront
x-amz-cf-id: zLT96BrXwF1sZAxojd9GWpDdKkDj741TruR6scOYhSZK2HljA_6fZA==
via: 1.1 9c60d6224ac0b44e908b5c9dcf70e9a4.cloudfront.net (CloudFront), 1.1 29a825d8a219984d47bec4350779b558.cloudfront.net (CloudFront), 1.1 google
date: Sat, 11 Mar 2023 03:37:03 GMT
age: 51104
etag: "2395f71c326974fad24daac2eae607dda08a2c26"
content-type: image/gif
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2af6ca30-ca1c-47f5-b5d3-50da9648b6c5.jpeg
200 OK 5.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2af6ca30-ca1c-47f5-b5d3-50da9648b6c5.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6c23372c93f0515a6133f5adc26c1712
3c8388cf727cb7007308ee0b42da57f5f0db489a
e24a8f21c65c6bc26698c85adb81f3712f4df9ab2dbe8075a77ea947640f8be6
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2af6ca30-ca1c-47f5-b5d3-50da9648b6c5.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5512
x-amzn-requestid: db69d563-a267-49fd-a63a-9de5282ac108
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: BlZKRGW-IAMFmuQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-640ba241-69cb4960369f1da8583e36db;Sampled=0
x-amzn-remapped-date: Fri, 10 Mar 2023 21:33:53 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Miss from cloudfront
x-amz-cf-id: pU47Uf1OAos6ZmhKohYesj3ZDaImrzXzul-FQ5DRSh_A25EK7S8GmA==
via: 1.1 000f4a2f631bace380a0afa747a82482.cloudfront.net (CloudFront), 1.1 31dfa94142c6eaf975b0e5454c00340a.cloudfront.net (CloudFront), 1.1 google
date: Fri, 10 Mar 2023 21:51:55 GMT
etag: "3c8388cf727cb7007308ee0b42da57f5f0db489a"
content-type: image/jpeg
age: 71812
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4074a978-99d0-47aa-8c85-466557c98632.jpeg
200 OK 6.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4074a978-99d0-47aa-8c85-466557c98632.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 57a25c00fa7cdf85ee8a0c2c7747ec92
47f208a0c9379c760d2cd7bb3d825dcff10ecaf1
91398352ace48027b953778032d734318460d3a1c80ee674586bd2e8df241946
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4074a978-99d0-47aa-8c85-466557c98632.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6461
x-amzn-requestid: 9a3e415b-c4d0-4160-941e-7cd26795e573
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: BlZKREojIAMFTtA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-640ba241-16c54b003338f3c90bd958fc;Sampled=0
x-amzn-remapped-date: Fri, 10 Mar 2023 21:33:53 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Miss from cloudfront
x-amz-cf-id: HvTlSmLWd1U6wcxMNnArtsw4Cjy4ZgyMsqPz1sUlNDluHhvlmy8oIA==
via: 1.1 a20e81b65d2465c729ce2f6bfe539dd0.cloudfront.net (CloudFront), 1.1 7545e37b10b5fcf5e3df98185c85194a.cloudfront.net (CloudFront), 1.1 google
date: Fri, 10 Mar 2023 21:50:49 GMT
age: 71878
etag: "47f208a0c9379c760d2cd7bb3d825dcff10ecaf1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd0af9826-fade-456f-baa4-11909578478d.jpeg
200 OK 7.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd0af9826-fade-456f-baa4-11909578478d.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6e828c35d1a85eabbe81b801d6b1ad33
040b83c5c73a4b02c65e44408b8f2385e0002791
5c27268f33fc448dc3824ae0ad3ed411a204fbc076a3356b3381b2495036c6a3
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd0af9826-fade-456f-baa4-11909578478d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7384
x-amzn-requestid: d70a1ba5-1bc7-427b-b1cf-cc93b97c2b52
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: BlZLmGTmoAMF7lg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-640ba249-05a5a68e7d2e2b343b802da1;Sampled=0
x-amzn-remapped-date: Fri, 10 Mar 2023 21:34:01 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Miss from cloudfront
x-amz-cf-id: AwAUbn-HKAtgtrxYTeDFUIYTT4oLbXJA9wEI1VPsuDJhUNKK3_UHRg==
via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 b2d3922a177f6cecf9222a78a0a1ad32.cloudfront.net (CloudFront), 1.1 google
date: Fri, 10 Mar 2023 21:50:49 GMT
age: 71878
etag: "040b83c5c73a4b02c65e44408b8f2385e0002791"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F676713c6-f6d7-46be-a2a3-ef48825207e6.jpeg
200 OK 6.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F676713c6-f6d7-46be-a2a3-ef48825207e6.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2f424440d693260c47fc8053f3fee8c3
0aedb0d70b5828a7b3e981e958c856988cd1185e
c18592348905442cbec754d5836e5a7893890dc7939fb7e00420cbd5eb6e83df
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F676713c6-f6d7-46be-a2a3-ef48825207e6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6648
x-amzn-requestid: 9bd30314-db94-456a-93ff-58d0850e1167
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: BZhsbGtUoAMFwqQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6406e31c-6ca0c23767d9d7f94b3a3c97;Sampled=0
x-amzn-remapped-date: Tue, 07 Mar 2023 07:09:16 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: PicgwWEnjSFNSrcsm5eigownqfddacD3vJirgXMBG9afM5npoSczdA==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 0ec9ddba08fcd99386924593dbdbd44a.cloudfront.net (CloudFront), 1.1 google
date: Sat, 11 Mar 2023 13:22:45 GMT
age: 15962
etag: "0aedb0d70b5828a7b3e981e958c856988cd1185e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9a1d9563-2bb7-4a5d-bd0d-a3950608df7a.jpeg
200 OK 6.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9a1d9563-2bb7-4a5d-bd0d-a3950608df7a.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ad3d235a450782752b4d698aed69f5e5
dbe55775ec1fb59c27102c6d83a5aace982118bf
47e2d3149bda22636f5fea2b41123665c29148732152fad9cefcb3e5cc97dfba
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9a1d9563-2bb7-4a5d-bd0d-a3950608df7a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6547
x-amzn-requestid: dabd0159-a37e-4dbd-8dcc-2e0edca6a52e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: BZhygEY1IAMFq2g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6406e342-0dd395d2452b24d97bf5bcee;Sampled=0
x-amzn-remapped-date: Tue, 07 Mar 2023 07:09:54 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: lP11kbg00wpULg9PdAg3KMLdX8z57Q-MI-Hxa3cXye0TtDNErvjAnA==
via: 1.1 446313511980eb02f28ff5a9a4147c0a.cloudfront.net (CloudFront), 1.1 21618d080c6bfbcd465fc55a167a8c1a.cloudfront.net (CloudFront), 1.1 google
date: Sat, 11 Mar 2023 13:19:08 GMT
age: 16179
etag: "dbe55775ec1fb59c27102c6d83a5aace982118bf"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
cookiehub.net/c2/css/2.4.12.css
200 OK 0 B URL HTTP/2 cookiehub.net/c2/css/2.4.12.css
IP
GET /c2/css/2.4.12.css HTTP/1.1
Host: cookiehub.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vodafone-internet.it/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/css
last-modified: Mon, 27 Feb 2023 10:31:10 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: NJhK02DjcU5KwjerYVwXrpabzVzNPHF3
server: AmazonS3
content-encoding: br
date: Sat, 11 Mar 2023 08:47:33 GMT
etag: W/"c9978fccc00e99b936b78b1afa12b71f"
x-cache: Hit from cloudfront
via: 1.1 f66e3db0f0449307dba3fbf72bbf3bac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: -xGaWvVPCBYxnwW1MEUp7UUQr0g980RZgDKDPoti3RIjOPvin3N6aw==
age: 32473
cache-control: max-age=86400
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
cdn.usefathom.com/script.js
200 OK 0 B URL HTTP/2 cdn.usefathom.com/script.js
IP
ASN #34989 ServeTheWorld AS
GET /script.js HTTP/1.1
Host: cdn.usefathom.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vodafone-internet.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 11 Mar 2023 17:48:45 GMT
content-type: application/javascript
server: BunnyCDN-NO1-830
cdn-pullzone: 506217
cdn-uid: aa90c48b-f401-4fa1-aac1-c94c8f3ae560
cdn-requestcountrycode: NO
vary: Accept-Encoding, Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=0
etag: W/"d41d8cd98f00b204e9800998ecf8427e"
last-modified: Tue, 28 Feb 2023 17:38:08 GMT
x-vapor-base64-encode: True
cdn-proxyver: 1.03
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cdn-cachedat: 03/01/2023 20:59:30
cdn-edgestorageid: 830
cdn-status: 200
cdn-requestid: 27ba1ccb362d510d9b01ed85f1d5b464
cdn-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
www.clickcease.com/monitor/stat.js
200 OK 0 B URL HTTP/2 www.clickcease.com/monitor/stat.js
IP
GET /monitor/stat.js HTTP/1.1
Host: www.clickcease.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vodafone-internet.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
last-modified: Tue, 22 Nov 2022 11:31:37 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: 6Er2d0GJvgnFniPQXIH7h8kzG7dJBNJf
server: AmazonS3
content-encoding: gzip
date: Sat, 11 Mar 2023 17:48:45 GMT
etag: W/"1c27f449b067550681f23ad3e53988fa"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: HUabbHUkxmqWu-6DKgFMNDSu99HparD7tWnlj3vn5b8Rhrgh3aTdmQ==
age: 14
x-frame-options: SAMEORIGIN
referrer-policy: no-referrer-when-downgrade
content-security-policy: frame-ancestors 'self' https://clickcease.com https://*.clickcease.com; upgrade-insecure-requests;
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains
permissions-policy: microphone 'none'; camera 'none';
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=PT+Serif%7CFrancois+One&subset=latin%2Clatin-ext&display=swap
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=PT+Serif%7CFrancois+One&subset=latin%2Clatin-ext&display=swap
IP
GET /css?family=PT+Serif%7CFrancois+One&subset=latin%2Clatin-ext&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://vodafone-internet.it/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 11 Mar 2023 17:48:46 GMT
date: Sat, 11 Mar 2023 17:48:46 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
185.81.6.235
34.160.144.191
46.105.202.39
104.84.152.72
194.242.11.186