| r11.o.lencr.org/ | 23.36.76.226 | | 504 B |
IP 23.36.76.226:0
ASN#20940 Akamai International B.V.
Hash50a89b39234eb6cc4eda70d7e27be17f 306340eb26b6817fd8851a085563a88eed7e2b6b eaabd011ed0722deeee97e566b8318b17d8e993d31db4c2cc31cf0e3cd8191f5
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "EAABD011ED0722DEEEE97E566B8318B17D8E993D31DB4C2CC31CF0E3CD8191F5"
Last-Modified: Mon, 19 Aug 2024 12:55:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2323
Expires: Wed, 21 Aug 2024 23:03:59 GMT
Date: Wed, 21 Aug 2024 22:25:16 GMT
Connection: keep-alive
|
|
| r10.o.lencr.org/ | 23.36.77.32 | | 504 B |
IP 23.36.77.32:0
ASN#20940 Akamai International B.V.
Hash189517abaffd3ad15fac051239960c9d 99019d46813ecf2b1215757ca1f05ac850b9f692 31daadeeb8828e5e01008ca5a4e7c5fba0acf5517903eafce413a10dcfe66fdb
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "31DAADEEB8828E5E01008CA5A4E7C5FBA0ACF5517903EAFCE413A10DCFE66FDB"
Last-Modified: Wed, 21 Aug 2024 06:27:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19648
Expires: Thu, 22 Aug 2024 03:52:44 GMT
Date: Wed, 21 Aug 2024 22:25:16 GMT
Connection: keep-alive
|
|
| r10.o.lencr.org/ | 23.36.77.32 | | 504 B |
IP 23.36.77.32:0
ASN#20940 Akamai International B.V.
Hash5d0dd93e6a07253100201a9c8a3e15a5 30adbd52887825ae2779d7fb12276bed8b1d8178 07bb496669af2e33765f0ad730934dad6f8ad79a628c6b21cd545505335471c6
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "07BB496669AF2E33765F0AD730934DAD6F8AD79A628C6B21CD545505335471C6"
Last-Modified: Mon, 19 Aug 2024 21:59:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17968
Expires: Thu, 22 Aug 2024 03:24:44 GMT
Date: Wed, 21 Aug 2024 22:25:16 GMT
Connection: keep-alive
|
|
| r10.o.lencr.org/ | 23.36.77.32 | | 504 B |
IP 23.36.77.32:0
ASN#20940 Akamai International B.V.
Hashfa24406b28144f03c66e0892b293241b 64ec25a3e583dcd2ea13558272ac7badebbfc3d6 8d1b5de3eaf9d4ae520c30cb01548286eeb9853665444c34be6caac091af5638
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "8D1B5DE3EAF9D4AE520C30CB01548286EEB9853665444C34BE6CAAC091AF5638"
Last-Modified: Wed, 21 Aug 2024 03:19:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9453
Expires: Thu, 22 Aug 2024 01:02:49 GMT
Date: Wed, 21 Aug 2024 22:25:16 GMT
Connection: keep-alive
|
|
| zimbra.studiochiesa.it/css/common,login,zhtml,skin.css?skin=harmony&v=240412111334 | 93.47.117.60 | 200 OK | 155 kB |
URL GET HTTP/2zimbra.studiochiesa.it/css/common,login,zhtml,skin.css?skin=harmony&v=240412111334 IP 93.47.117.60:443
Requested byhttps://zimbra.studiochiesa.it/ CertificateIssuerGoDaddy.com, Inc. Subjectproxy2-dc.ilger.com FingerprintC5:C8:D6:35:C1:93:7A:D8:FD:2E:3D:97:07:B6:95:29:0F:2B:6D:A6 ValidityWed, 03 Apr 2024 14:58:20 GMT - Thu, 03 Apr 2025 14:58:20 GMT
File typegzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT) Size155 kB (154959 bytes) Hash23627383a77da8ead3f21a00f24717de b2a20cfe8870754cb85a59eb741a346d0c21ba9a c769b4ca32fbff4f26f5138ae27bb474883ad4ea56e903f6e2d5e0a96558a07a
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - Zimbra Web Client |
GET /css/common,login,zhtml,skin.css?skin=harmony&v=240412111334 HTTP/1.1
Host: zimbra.studiochiesa.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zimbra.studiochiesa.it/
Cookie: ZM_TEST=true; ZM_LOGIN_CSRF=56b48644-8914-4fe3-8122-3fc0720c0105
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 21 Aug 2024 22:25:17 GMT
content-type: text/css
x-frame-options: SAMEORIGIN
expires: Fri, 20 Sep 2024 23:25:17 GMT
cache-control: public, max-age=2595600
vary: User-Agent, Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| zimbra.studiochiesa.it/img/questionMark.png | 93.47.117.60 | 200 OK | 5.4 kB |
URL GET HTTP/2zimbra.studiochiesa.it/img/questionMark.png IP 93.47.117.60:443
Requested byhttps://zimbra.studiochiesa.it/ CertificateIssuerGoDaddy.com, Inc. Subjectproxy2-dc.ilger.com FingerprintC5:C8:D6:35:C1:93:7A:D8:FD:2E:3D:97:07:B6:95:29:0F:2B:6D:A6 ValidityWed, 03 Apr 2024 14:58:20 GMT - Thu, 03 Apr 2025 14:58:20 GMT
File typePNG image data, 225 x 225, 8-bit/color RGBA, non-interlaced Hash5d496d46fe9801cf0e92af8337b3b6af 6f9e34028d56b0229759aad8dab4f0c30be30a7e 395b89ffffb5b6ea44d2933531396f8d2ae8ff84bae554a1c245d0777af59034
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - Zimbra Web Client |
GET /img/questionMark.png HTTP/1.1
Host: zimbra.studiochiesa.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zimbra.studiochiesa.it/css/common,login,zhtml,skin.css?skin=harmony&v=240412111334
Cookie: ZM_TEST=true; ZM_LOGIN_CSRF=56b48644-8914-4fe3-8122-3fc0720c0105
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 21 Aug 2024 22:25:18 GMT
content-type: image/png
content-length: 5359
x-frame-options: SAMEORIGIN
expires: Fri, 20 Sep 2024 23:25:18 GMT
cache-control: public, max-age=2595600
last-modified: Fri, 12 Apr 2024 10:47:46 GMT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.ilger.com/images/loghi-zimbra/studiochiesa.it/logo_400x48.png | 93.47.117.143 | | 9.6 kB |
URL GET www.ilger.com/images/loghi-zimbra/studiochiesa.it/logo_400x48.png IP 93.47.117.143:0
Requested byhttps://zimbra.studiochiesa.it/ CertificateIssuerGoDaddy.com, Inc. Subject*.ilger.com Fingerprint61:2A:E7:E1:CC:43:B5:3F:36:34:21:EA:FC:D4:96:DC:89:03:0A:7F ValidityTue, 03 Oct 2023 08:46:21 GMT - Thu, 03 Oct 2024 08:16:04 GMT
File typePNG image data, 400 x 48, 8-bit/color RGBA, non-interlaced Hashf6398d4ff39a716a3bb6c786b776e441 b718cc3b2a68adb03fecb8fb3804d2ba5c363841 fec959f04a83b1770d2be5701de80eca04d7324e4c84a343bef887fcf7c25576
GET /images/loghi-zimbra/studiochiesa.it/logo_400x48.png HTTP/1.1
Host: www.ilger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zimbra.studiochiesa.it/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 21 Aug 2024 22:25:18 GMT
Server: Apache
Last-Modified: Thu, 15 Sep 2022 08:09:32 GMT
Accept-Ranges: bytes
Content-Encoding: gzip
Cache-Control: max-age=31536000
Content-Length: 9639
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: image/png
|
|
| zimbra.studiochiesa.it/img/logo/favicon.ico | 93.47.117.60 | 200 OK | 1.2 kB |
URL GET HTTP/2zimbra.studiochiesa.it/img/logo/favicon.ico IP 93.47.117.60:443
Requested byhttps://zimbra.studiochiesa.it/ CertificateIssuerGoDaddy.com, Inc. Subjectproxy2-dc.ilger.com FingerprintC5:C8:D6:35:C1:93:7A:D8:FD:2E:3D:97:07:B6:95:29:0F:2B:6D:A6 ValidityWed, 03 Apr 2024 14:58:20 GMT - Thu, 03 Apr 2025 14:58:20 GMT
File typeMS Windows icon resource - 1 icon, 16x16, 32 bits/pixel Hash8c7d1c14e4b9c42f07bd6b800d93b806 87e49826ffb3bc1ddac38feebb6bb98eaef568b2 1afd891aacc433e75265e3ddc9cb4fc63b88259977811384426c535037711637
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - Zimbra Web Client |
GET /img/logo/favicon.ico HTTP/1.1
Host: zimbra.studiochiesa.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zimbra.studiochiesa.it/
Cookie: ZM_TEST=true; ZM_LOGIN_CSRF=56b48644-8914-4fe3-8122-3fc0720c0105
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 21 Aug 2024 22:25:18 GMT
content-type: image/x-icon
content-length: 1150
x-frame-options: SAMEORIGIN
expires: Fri, 20 Sep 2024 23:25:18 GMT
cache-control: public, max-age=2595600
last-modified: Fri, 12 Apr 2024 10:47:46 GMT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| r11.o.lencr.org/ | 23.36.77.32 | | 504 B |
IP 23.36.77.32:0
ASN#20940 Akamai International B.V.
Hash663683cf83257c4867434f1b98db8939 f0ca9dbee82d2d4031edbf65bc9aa36d25264687 42b541fd8690abf306d19e5601a846c6b5a6c494342f17fe60b6048a340cd67d
POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "42B541FD8690ABF306D19E5601A846C6B5A6C494342F17FE60B6048A340CD67D"
Last-Modified: Tue, 20 Aug 2024 09:16:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3043
Expires: Wed, 21 Aug 2024 23:16:01 GMT
Date: Wed, 21 Aug 2024 22:25:18 GMT
Connection: keep-alive
|
|
| | 93.47.117.60 | 200 OK | 22 kB |
URL User Request GET HTTP/2IP 93.47.117.60:443
CertificateIssuerGoDaddy.com, Inc. Subjectproxy2-dc.ilger.com FingerprintC5:C8:D6:35:C1:93:7A:D8:FD:2E:3D:97:07:B6:95:29:0F:2B:6D:A6 ValidityWed, 03 Apr 2024 14:58:20 GMT - Thu, 03 Apr 2025 14:58:20 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - Zimbra Web Client |
GET / HTTP/1.1
Host: zimbra.studiochiesa.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 21 Aug 2024 22:25:17 GMT
content-type: text/html;charset=utf-8
x-frame-options: SAMEORIGIN
expires: -1
cache-control: no-store, no-cache, must-revalidate, max-age=0
pragma: no-cache
content-language: en-US
set-cookie: ZM_TEST=true; Secure
ZM_LOGIN_CSRF=56b48644-8914-4fe3-8122-3fc0720c0105; Secure; HttpOnly
x-ua-compatible: IE=edge
vary: User-Agent, Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| zimbra.studiochiesa.it/img/new-back-ground-image.png | 93.47.117.60 | 200 OK | 142 kB |
URL GET HTTP/2zimbra.studiochiesa.it/img/new-back-ground-image.png IP 93.47.117.60:443
Requested byhttps://zimbra.studiochiesa.it/ CertificateIssuerGoDaddy.com, Inc. Subjectproxy2-dc.ilger.com FingerprintC5:C8:D6:35:C1:93:7A:D8:FD:2E:3D:97:07:B6:95:29:0F:2B:6D:A6 ValidityWed, 03 Apr 2024 14:58:20 GMT - Thu, 03 Apr 2025 14:58:20 GMT
File typePNG image data, 1440 x 1024, 8-bit colormap, non-interlaced Size142 kB (141674 bytes) Hash5a09af857512a874f5e2a6e01b80742b 8c87bcfd42ee8fab57f08c3664abd1424e608b6a 18b729cd6f3dd2b5657c1680e1388b825dc2c2d1e732e03478006714ac7ebc2d
Analyzer | Verdict | Alert | urlquery | phishing | Phishing - Zimbra Web Client |
GET /img/new-back-ground-image.png HTTP/1.1
Host: zimbra.studiochiesa.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zimbra.studiochiesa.it/css/common,login,zhtml,skin.css?skin=harmony&v=240412111334
Cookie: ZM_TEST=true; ZM_LOGIN_CSRF=56b48644-8914-4fe3-8122-3fc0720c0105
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 21 Aug 2024 22:25:18 GMT
content-type: image/png
content-length: 141674
x-frame-options: SAMEORIGIN
expires: Fri, 20 Sep 2024 23:25:18 GMT
cache-control: public, max-age=2595600
last-modified: Fri, 12 Apr 2024 10:47:46 GMT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|