Report - www.luciamangili.it/z1JKap/china.com/

Report Overview

URL

www.luciamangili.it/z1JKap/china.com/
IP

89.46.106.29

ASN

#31034 Aruba S.p.A.
Submitted

2023-02-09T15:35:52Z

Access
Tags

None
urlquery detections

No alerts detected

Detections

urlquery

0
Network Intrusion Detection

0
Threat Detection Systems

10

Domain Summary

Domain	Rank	First Seen	Last Seen	Sent	Received	IP
stats.g.doubleclick.net (2)	96	2013-06-10T22:21:11Z	2023-03-13T08:02:41Z	1120	1048	142.251.1.156
www.facebook.com (1)	99	2012-05-21T02:23:41Z	2021-02-04T00:31:35Z	627	349	157.240.205.35
region1.analytics.google.com (1)	unknown	2022-03-17T12:26:33Z	2023-03-13T05:11:52Z	811	450	216.239.32.36
bat.bing.com (3)	387	2014-04-08T11:23:16Z	2023-03-13T05:09:15Z	1472	13412	204.79.197.200
connect.facebook.net (1)	139	2012-05-22T04:51:28Z	2023-03-13T05:09:29Z	377	28822	157.240.205.11
googleads.g.doubleclick.net (1)	42	2021-02-20T16:43:32Z	2023-03-13T08:39:16Z	710	1745	142.250.74.98
content-signature-2.cdn.mozilla.net (1)	1152	2020-11-03T13:26:46Z	2023-03-13T05:09:35Z	413	5844	34.160.144.191
contile.services.mozilla.com (1)	1114	2021-05-27T20:32:35Z	2023-03-13T05:09:13Z	333	391	34.117.237.239
maxcdn.bootstrapcdn.com (1)	724	2014-06-18T02:37:31Z	2023-03-13T07:25:00Z	398	14725	188.114.99.234
ocsp.dcocsp.cn (1)	33518	2018-11-07T14:15:36Z	2023-03-13T06:54:43Z	338	1083	47.246.44.228
www.google.no (3)	25607	2016-04-05T21:50:59Z	2023-03-13T06:26:15Z	1720	1797	142.250.74.163
pylon.micstatic.com (1)	156834	2021-01-28T23:23:12Z	2023-03-13T05:31:05Z	420	407	104.18.21.229
ocsp.pki.goog (10)	175	2018-07-01T08:43:07Z	2023-03-13T05:09:47Z	3430	6995	216.58.211.3
www.google.com (2)	7	2015-05-10T13:11:19Z	2023-03-13T06:40:43Z	1222	1219	216.58.207.228
stackpath.bootstrapcdn.com (1)	2467	2018-06-15T22:36:43Z	2023-03-13T07:25:30Z	401	917	104.18.10.207
www.luciamangili.it (11)	unknown	2022-11-21T13:48:12Z	2023-02-10T03:40:39Z	4754	62971	89.46.106.29
firefox.settings.services.mozilla.com (2)	867	2020-06-04T22:08:41Z	2023-03-13T05:09:10Z	782	2374	35.241.9.150
ocsp.digicert.com (5)	86	2012-05-21T09:02:23Z	2023-03-13T06:00:13Z	1705	3169	93.184.220.29
www.micstatic.com (6)	120170	2015-07-22T23:43:48Z	2023-03-13T05:31:05Z	2712	175442	104.18.21.229
img-getpocket.cdn.mozilla.net (6)	1631	2018-06-22T01:36:00Z	2023-03-13T05:09:16Z	3246	61527	34.120.237.76
www.google-analytics.com (2)	40	2012-10-03T03:04:21Z	2023-03-13T07:36:03Z	1206	21140	142.250.74.110
www.made-in-china.com (1)	95945	2012-05-30T17:33:15Z	2023-03-13T05:31:05Z	488	376	104.18.30.240
r3.o.lencr.org (8)	344	2020-12-02T09:52:13Z	2023-03-13T05:09:07Z	2704	7090	23.36.77.32
ocsp06.actalis.it (1)	190155	2017-01-31T11:14:36Z	2023-03-13T07:04:51Z	353	4216	109.70.240.114
push.services.mozilla.com (1)	2140	2014-10-24T10:27:06Z	2023-03-13T05:09:14Z	606	127	52.38.165.113
fa.micstatic.com (4)	153248	2020-03-25T06:07:14Z	2023-03-13T05:31:05Z	5160	1527	104.18.24.206

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

Scan Date	Severity	Indicator	Alert
2023-02-09	medium	www.luciamangili.it/z1JKap/china.com/	Made-In-China
2023-02-09	medium	www.luciamangili.it/z1JKap/china.com/	Made-In-China

PhishTank

No alerts detected

Fortinet's Web Filter

Scan Date	Severity	Indicator	Alert
2023-02-09	medium	www.luciamangili.it/z1JKap/china.com/	Phishing
2023-02-09	medium	www.luciamangili.it/z1JKap/china.com/js/jquery-3.2.1.slim.min.js	Phishing
2023-02-09	medium	www.luciamangili.it/z1JKap/china.com/js/popper.min.js	Phishing
2023-02-09	medium	www.luciamangili.it/z1JKap/china.com/	Phishing
2023-02-09	medium	www.luciamangili.it/z1JKap/china.com/js/jquery-3.1.1.min.js	Phishing
2023-02-09	medium	www.luciamangili.it/z1JKap/china.com/js/jquery.min.js	Phishing
2023-02-09	medium	www.luciamangili.it/z1JKap/china.com/js/jquery-3.2.1.slim.min.js	Phishing
2023-02-09	medium	www.luciamangili.it/z1JKap/china.com/js/jquery-3.3.1.js	Phishing

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

HTTP Transactions (77)

URL IP Response Size

www.luciamangili.it/z1JKap/china.com/

89.46.106.29

301 Moved Permanently

168

URL HTTP/1.1

www.luciamangili.it/z1JKap/china.com/
IP

89.46.106.29:0
ASN

#31034 Aruba S.p.A.

Magic

HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators

Size

168
Hash

82f04704c04c2706b1b96a73be2ff3a9

8cd210a378b7f54ce8945cdf1c7ce1f696171eee

ede97dbf06b3e703cd950b3591a29351ce9b24eccab58b1a913b3c7e4571bf02

Detections

Analyzer	Verdict	Alert
openphish	Made-In-China
fortinet	Phishing

HTTP Headers

                                        GET /z1JKap/china.com/ HTTP/1.1
Host: www.luciamangili.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

                                        HTTP/1.1 301 Moved Permanently
Server: aruba-proxy
Date: Thu, 09 Feb 2023 15:35:40 GMT
Content-Type: text/html
Content-Length: 168
Connection: keep-alive
Location: https://www.luciamangili.it/z1JKap/china.com/
X-ServerName: ipvsproxy74.ad.aruba.it

r3.o.lencr.org/

23.36.77.32

200 OK

503

URL HTTP/1.1

r3.o.lencr.org/
IP

23.36.77.32:0
ASN

#20940 Akamai International B.V.

Magic

data

Size

503
Hash

565c1bbc5c1c40be1988b3bf6fd9dc1a

cfdba5bc597130461dd67bf6cda53183be592493

60ceb36a8329c92fc49a3caf50daf511a38e01eac21a07d7a0a838166bea058d

HTTP Headers

                                        POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "60CEB36A8329C92FC49A3CAF50DAF511A38E01EAC21A07D7A0A838166BEA058D"
Last-Modified: Mon, 06 Feb 2023 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2229
Expires: Thu, 09 Feb 2023 16:12:49 GMT
Date: Thu, 09 Feb 2023 15:35:40 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503

URL HTTP/1.1

r3.o.lencr.org/
IP

23.36.77.32:0
ASN

#20940 Akamai International B.V.

Magic

data

Size

503
Hash

b7407cc102d62a5acd5e61f8a79bed36

c2f4890a62454e514962b55b7fc14228339c8e90

be282de92da261128a7c8471f3067466aa9930fd0ab2a2cdda8cd2d6ce2bbd74

HTTP Headers

                                        POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BE282DE92DA261128A7C8471F3067466AA9930FD0AB2A2CDDA8CD2D6CE2BBD74"
Last-Modified: Wed, 08 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13508
Expires: Thu, 09 Feb 2023 19:20:48 GMT
Date: Thu, 09 Feb 2023 15:35:40 GMT
Connection: keep-alive

firefox.settings.services.mozilla.com/v1/

35.241.9.150

200 OK

939

URL HTTP/2

firefox.settings.services.mozilla.com/v1/
IP

35.241.9.150:0
ASN

#15169 GOOGLE

Magic

JSON data\012- , ASCII text, with very long lines (939), with no line terminators

Size

939
Hash

bf0c602d32b3c14606f22a86183b5e3c

6eabd8d83475eba731968abe1a05a8bfd272f160

6c6a7c519a9e950c2445ed874a25211a94dd4d3cf3afb0103af9dcd1dbd5ff9e

HTTP Headers

                                        GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Content-Type, Retry-After, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Thu, 09 Feb 2023 14:36:49 GMT
content-type: application/json
age: 3531
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2

r3.o.lencr.org/

23.36.77.32

200 OK

503

URL HTTP/1.1

r3.o.lencr.org/
IP

23.36.77.32:0
ASN

#20940 Akamai International B.V.

Magic

data

Size

503
Hash

50a2f8cdbbd1059f5318753155bba7ef

405e63ea4683be44f876feae34b5cb645ff751f2

f6ac743a5a17d64d2858fec5791050d2dc8074ddd823826c93e67bffdb2f0868

HTTP Headers

                                        POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F6AC743A5A17D64D2858FEC5791050D2DC8074DDD823826C93E67BFFDB2F0868"
Last-Modified: Thu, 09 Feb 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8348
Expires: Thu, 09 Feb 2023 17:54:48 GMT
Date: Thu, 09 Feb 2023 15:35:40 GMT
Connection: keep-alive

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-03-20-18-44-46.chain

34.160.144.191

200 OK

5348

URL HTTP/2

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-03-20-18-44-46.chain
IP

34.160.144.191:0
ASN

#15169 GOOGLE

Magic

PEM certificate\012- , ASCII text

Size

5348
Hash

e76071a28ee566dababb3834f46d68ed

aebb4e68c1ba2de0f90025283e8ed8470944fde0

78b6df2627172e5b35476bc31020f02898cdc412aaf4337af2c3b049a60912b6

HTTP Headers

                                        GET /chains/remote-settings.content-signature.mozilla.org-2023-03-20-18-44-46.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
x-amz-id-2: Pu7Li3p2pevJ0WSafmjX2alk7Az4tEOC0YHy2lL4XiJPYOWztvah2F8NzhhRqaUvucCWeUAZBXU=
x-amz-request-id: V3QP995XW1XBY3QA
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 09 Feb 2023 14:46:26 GMT
age: 2955
last-modified: Sun, 29 Jan 2023 18:44:47 GMT
etag: "e76071a28ee566dababb3834f46d68ed"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2

contile.services.mozilla.com/v1/tiles

34.117.237.239

200 OK

URL HTTP/2

contile.services.mozilla.com/v1/tiles
IP

34.117.237.239:0
ASN

#15169 GOOGLE

Magic

JSON data\012- , ASCII text, with no line terminators

Size

12
Hash

23e88fb7b99543fb33315b29b1fad9d6

a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce

7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

HTTP Headers

                                        GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
server: nginx
date: Thu, 09 Feb 2023 15:35:41 GMT
content-type: application/json
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2

ocsp06.actalis.it/VA/AUTHDV-G3

109.70.240.114

200

3926

URL HTTP/1.1

ocsp06.actalis.it/VA/AUTHDV-G3
IP

109.70.240.114:0
ASN

#31034 Aruba S.p.A.

Magic

data

Size

3926
Hash

ad56790ea5158d8f9277decbee7e5fee

dd83a1b3685c0f59af0b3bddc79d5a60f88b8ad3

7bb9cbee799dff427099162105f53878a8b3f967e464c84f97a3a84476e79cf8

HTTP Headers

                                        POST /VA/AUTHDV-G3 HTTP/1.1
Host: ocsp06.actalis.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 
Server: nginx
Date: Thu, 09 Feb 2023 15:35:41 GMT
Content-Type: application/ocsp-response
Content-Length: 3926
Connection: keep-alive
Last-Modified: Thu, 09 Feb 2023 12:08:19 GMT
Expires: Fri, 10 Feb 2023 12:08:18 GMT
ETag: "dd83a1b3685c0f59af0b3bddc79d5a60f88b8ad3"

ocsp.digicert.com/

93.184.220.29

200 OK

279

URL HTTP/1.1

ocsp.digicert.com/
IP

93.184.220.29:0
ASN

#15133 EDGECAST

Magic

data

Size

279
Hash

8ba328ca1dafc69ce7b7537cdc89616d

7ff4ddc85601ddb20d852b3b70e152ebb63e439d

27a975bedc82774262e4da67a21436afb618fc1ba3a9a29ca78401e812266929

HTTP Headers

                                        POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3254
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 09 Feb 2023 15:35:41 GMT
Last-Modified: Thu, 09 Feb 2023 14:41:27 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 279

ocsp.digicert.com/

93.184.220.29

200 OK

279

URL HTTP/1.1

ocsp.digicert.com/
IP

93.184.220.29:0
ASN

#15133 EDGECAST

Magic

data

Size

279
Hash

8ba328ca1dafc69ce7b7537cdc89616d

7ff4ddc85601ddb20d852b3b70e152ebb63e439d

27a975bedc82774262e4da67a21436afb618fc1ba3a9a29ca78401e812266929

HTTP Headers

                                        POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1824
Cache-Control: max-age=128631
Content-Type: application/ocsp-response
Date: Thu, 09 Feb 2023 15:35:41 GMT
Etag: "63e45f24-117"
Expires: Sat, 11 Feb 2023 03:19:32 GMT
Last-Modified: Thu, 09 Feb 2023 02:49:08 GMT
Server: ECS (ska/F714)
X-Cache: HIT
Content-Length: 279

ocsp.digicert.com/

93.184.220.29

200 OK

279

URL HTTP/1.1

ocsp.digicert.com/
IP

93.184.220.29:0
ASN

#15133 EDGECAST

Magic

data

Size

279
Hash

8ba328ca1dafc69ce7b7537cdc89616d

7ff4ddc85601ddb20d852b3b70e152ebb63e439d

27a975bedc82774262e4da67a21436afb618fc1ba3a9a29ca78401e812266929

HTTP Headers

                                        POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3254
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 09 Feb 2023 15:35:41 GMT
Last-Modified: Thu, 09 Feb 2023 14:41:27 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 279

maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js

188.114.99.234

200 OK

13808

URL HTTP/2

maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js
IP

188.114.99.234:0
ASN

#0

Magic

ASCII text, with very long lines (48664)

Size

13808
Hash

5f12a0b5e7ab012f6f9c36b8a1fc5438

62a2d36246061a952cafc0bab54d71b9b12becec

e6d84337e35c6ae603410fbbaa6c999fd05fdfccd4329b9050a62b2aa6742ab6

HTTP Headers

                                        GET /bootstrap/4.0.0/js/bootstrap.min.js HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.luciamangili.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
date: Thu, 09 Feb 2023 15:35:41 GMT
content-type: application/javascript; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
last-modified: Mon, 25 Jan 2021 22:04:04 GMT
cdn-cachedat: 08/04/2021 00:04:37
cdn-edgestorageid: 601
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-proxyver: 1.0
cdn-status: 200
cdn-requestid: 1a094ec5f566140ad8ed25d8ea736316
cdn-cache: HIT
cf-cache-status: HIT
age: 19000688
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 796dad23c9e0b4f1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

www.luciamangili.it/z1JKap/china.com/images/sign-default-buyer.jpg

89.46.106.29

200 OK

59332

URL HTTP/2

www.luciamangili.it/z1JKap/china.com/images/sign-default-buyer.jpg
IP

89.46.106.29:0
ASN

#31034 Aruba S.p.A.

Magic

JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 400x400, components 3\012- data

Size

59332
Hash

aad747a416ac43e97070741668013b7d

545d66347ffafc166225f72072fb915ae52b970e

844419cc2fe07888ab11bb6dd264a3d66225851ad62645dfc3044657e9963af3

HTTP Headers

                                        GET /z1JKap/china.com/images/sign-default-buyer.jpg HTTP/1.1
Host: www.luciamangili.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.luciamangili.it/z1JKap/china.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        HTTP/2 200 OK
server: aruba-proxy
date: Thu, 09 Feb 2023 15:35:41 GMT
content-type: image/jpeg
content-length: 59332
last-modified: Thu, 17 Nov 2022 16:02:15 GMT
accept-ranges: bytes
x-servername: ipvsproxy74.ad.aruba.it
X-Firefox-Spdy: h2

firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US

35.241.9.150

200 OK

329

URL HTTP/2

firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP

35.241.9.150:0
ASN

#15169 GOOGLE

Magic

JSON data\012- , ASCII text, with very long lines (329), with no line terminators

Size

329
Hash

0333b0655111aa68de771adfcc4db243

63f295a144ac87a7c8e23417626724eeca68a7eb

60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

HTTP Headers

                                        GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Last-Modified, Content-Type, Pragma, ETag, Retry-After, Backoff, Expires, Alert, Cache-Control, Content-Length
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Thu, 09 Feb 2023 14:51:21 GMT
age: 2660
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2

r3.o.lencr.org/

23.36.77.32

200 OK

503

URL HTTP/1.1

r3.o.lencr.org/
IP

23.36.77.32:0
ASN

#20940 Akamai International B.V.

Magic

data

Size

503
Hash

248ce16379b12f11927ecc3142aec450

fa5b189f2d9182479170cb61cc1723571e437bd2

a8d259b331bdefb00625b9bf057d44d0b3290fda0734c57eda187b04e23d59d4

HTTP Headers

                                        POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A8D259B331BDEFB00625B9BF057D44D0B3290FDA0734C57EDA187B04E23D59D4"
Last-Modified: Wed, 08 Feb 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12577
Expires: Thu, 09 Feb 2023 19:05:18 GMT
Date: Thu, 09 Feb 2023 15:35:41 GMT
Connection: keep-alive

www.micstatic.com/common/font/micon/micon-2/micon_3425a96d.woff2?v=20201103

104.18.21.229

200 OK

25720

URL HTTP/2

www.micstatic.com/common/font/micon/micon-2/micon_3425a96d.woff2?v=20201103
IP

104.18.21.229:0
ASN

#13335 CLOUDFLARENET

Magic

Web Open Font Format (Version 2), TrueType, length 25720, version 1.0\012- data

Size

25720
Hash

90c821175fe52b5e89497d4249dce3b6

0bbacc3050dcf88f37fd6042a6719f83ba6ad83a

18a097b5625eaee94db4a26223016d2f31b7b5f5529bc599ea183f551e5c13d3

HTTP Headers

                                        GET /common/font/micon/micon-2/micon_3425a96d.woff2?v=20201103 HTTP/1.1
Host: www.micstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.luciamangili.it
Connection: keep-alive
Referer: https://www.luciamangili.it/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
date: Thu, 09 Feb 2023 15:35:41 GMT
content-type: font/woff2
content-length: 25720
last-modified: Tue, 07 Jun 2022 11:17:37 GMT
etag: "629f33d1-6478"
expires: Sun, 06 Feb 2033 15:35:41 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 25018
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 796dad2668f9b524-OSL
X-Firefox-Spdy: h2

www.micstatic.com/common/font/Roboto/400-regular/Roboto-Regular_c0bdb222.woff2

104.18.21.229

200 OK

19832

URL HTTP/2

www.micstatic.com/common/font/Roboto/400-regular/Roboto-Regular_c0bdb222.woff2
IP

104.18.21.229:0
ASN

#13335 CLOUDFLARENET

Magic

Web Open Font Format (Version 2), TrueType, length 19832, version 2.8978\012- data

Size

19832
Hash

ed2022705048507e5995ee72717e7fd4

570864c3bccc3e0e203fdd67be3cf850387faefb

e7f4f778ddb41b7be2d20810bb560acee79da55ed5d3eeac12f2bb8948f4453a

HTTP Headers

                                        GET /common/font/Roboto/400-regular/Roboto-Regular_c0bdb222.woff2 HTTP/1.1
Host: www.micstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.luciamangili.it
Connection: keep-alive
Referer: https://www.luciamangili.it/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
date: Thu, 09 Feb 2023 15:35:41 GMT
content-type: font/woff2
content-length: 19832
last-modified: Wed, 16 Jun 2021 11:14:08 GMT
etag: "60c9dd00-4d78"
expires: Sun, 06 Feb 2033 15:35:41 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 25018
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 796dad267905b524-OSL
X-Firefox-Spdy: h2

www.micstatic.com/common/img/logo-2019/logo_d0822075.png?v=2

104.18.21.229

200 OK

4621

URL HTTP/2

www.micstatic.com/common/img/logo-2019/logo_d0822075.png?v=2
IP

104.18.21.229:0
ASN

#13335 CLOUDFLARENET

Magic

PNG image data, 257 x 47, 8-bit/color RGBA, non-interlaced\012- data

Size

4621
Hash

b173e18fb61eb3d489bfad3b2ea570fe

71703d796c502703619ec696e447c937f700b605

488ea251bdaf29ab45c94699fef89ad3368bfef0c0f24b671dcbefd4e474679d

HTTP Headers

                                        GET /common/img/logo-2019/logo_d0822075.png?v=2 HTTP/1.1
Host: www.micstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.luciamangili.it/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
date: Thu, 09 Feb 2023 15:35:41 GMT
content-type: image/png
content-length: 4621
last-modified: Wed, 16 Jun 2021 11:14:07 GMT
etag: "60c9dcff-120d"
expires: Sun, 06 Feb 2033 15:35:41 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
cf-cache-status: HIT
age: 213324
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 796dad2678530b49-OSL
X-Firefox-Spdy: h2

push.services.mozilla.com/

52.38.165.113

101 Switching Protocols

URL HTTP/1.1

push.services.mozilla.com/
IP

52.38.165.113:0
ASN

#16509 AMAZON-02

Magic

Size

0
Hash

d41d8cd98f00b204e9800998ecf8427e

da39a3ee5e6b4b0d3255bfef95601890afd80709

e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

                                        GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 239NeSIlPld1VCrIl+dA6w==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

                                        HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: iu/wCmUnZPXAAgLhPgBSc0MthbQ=

ocsp.dcocsp.cn/

47.246.44.228

200 OK

471

URL HTTP/1.1

ocsp.dcocsp.cn/
IP

47.246.44.228:0
ASN

#24429 Zhejiang Taobao Network Co.,Ltd

Magic

data

Size

471
Hash

190ea13956fde494d7396c0c4c156aed

f0a77345d56802a2d3767c20066d74eec79eeca4

c060b1d0f4ebb1109341059e02e8788bbaa6cce9451463053c1e39316f580c4d

HTTP Headers

                                        POST / HTTP/1.1
Host: ocsp.dcocsp.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Server: Tengine
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Date: Thu, 09 Feb 2023 15:27:47 GMT
Last-Modified: Thu, 09 Feb 2023 00:25:19 GMT
ETag: "63e43d6f-1d7"
Expires: Sat, 11 Feb 2023 00:25:19 GMT
Accept-Ranges: bytes
Ali-Swift-Global-Savetime: 1675956467
Via: cache21.l2de2[0,0,200-0,H], cache19.l2de2[1,0], cache5.se1[23,22,200-0,M], cache5.se1[24,0]
Age: 475
X-Cache: MISS TCP_REFRESH_MISS dirn:-2:-2
X-Swift-SaveTime: Thu, 09 Feb 2023 15:35:42 GMT
X-Swift-CacheTime: 3125
Timing-Allow-Origin: *
EagleId: 2ff62c9916759569426407153e

ocsp.pki.goog/gts1c3

216.58.211.3

200 OK

472

URL HTTP/1.1

ocsp.pki.goog/gts1c3
IP

216.58.211.3:0
ASN

#15169 GOOGLE

Magic

data

Size

472
Hash

c99599d6628f41d54430edaa40f5c533

4bbd35fd1097784ae5e1e046ba35595eb49ac57f

3cb4e5c0f89f5e97bd7b4a11c25b6bae84bb5a1d55982c44719b76b3f852035e

HTTP Headers

                                        POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 09 Feb 2023 15:35:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

www.micstatic.com/common/js/libs/sensors/sensorsdata.min-1.15.13_faw.js?r=1634120031144

104.18.21.229

200 OK

112684

URL HTTP/2

www.micstatic.com/common/js/libs/sensors/sensorsdata.min-1.15.13_faw.js?r=1634120031144
IP

104.18.21.229:0
ASN

#13335 CLOUDFLARENET

Magic

data

Size

112684
Hash

0852faac073435176443d184131dee7d

2ecb415d493a0bcd55e310acc2fd62f0ade3c5f0

9b5c8729a12863cea0367fce783bf94c356c057e8819ceef149778108d302a58

HTTP Headers

                                        GET /common/js/libs/sensors/sensorsdata.min-1.15.13_faw.js?r=1634120031144 HTTP/1.1
Host: www.micstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.luciamangili.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        HTTP/2 200 OK
date: Thu, 09 Feb 2023 15:35:42 GMT
content-type: application/javascript
last-modified: Wed, 01 Sep 2021 09:19:47 GMT
etag: W/"612f45b3-1461f"
expires: Sun, 06 Feb 2033 15:35:42 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
content-encoding: gzip
cf-cache-status: HIT
age: 141714
vary: Accept-Encoding
server: cloudflare
cf-ray: 796dad2c1f4b0b49-OSL
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

216.58.211.3

200 OK

472

URL HTTP/1.1

ocsp.pki.goog/gts1c3
IP

216.58.211.3:0
ASN

#15169 GOOGLE

Magic

data

Size

472
Hash

c401431df81ddb15caa41c0dd46d1e89

1425acaf4f62be49ed25a6ed3ee9ea9f4b64cc27

728bea4c87ad7bdc5e5755af61323951bdd7604698a67360e38837131b20c426

HTTP Headers

                                        POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 09 Feb 2023 15:35:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

r3.o.lencr.org/

23.36.77.32

200 OK

503

URL HTTP/1.1

r3.o.lencr.org/
IP

23.36.77.32:0
ASN

#20940 Akamai International B.V.

Magic

data

Size

503
Hash

0c19807b30cf20dc4874da8543f91d4d

b4b5c21a3e33a80b03813ede681b350144f4a5a9

c8aa35335aeff74e25474f5c7093ed4917ba4a3d203259e93587259bf7658d3c

HTTP Headers

                                        POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C8AA35335AEFF74E25474F5C7093ED4917BA4A3D203259E93587259BF7658D3C"
Last-Modified: Wed, 08 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9660
Expires: Thu, 09 Feb 2023 18:16:43 GMT
Date: Thu, 09 Feb 2023 15:35:43 GMT
Connection: keep-alive

www.luciamangili.it/z1JKap/china.com/js/jquery-3.2.1.slim.min.js

89.46.106.29

404 Not Found

849

URL HTTP/2

www.luciamangili.it/z1JKap/china.com/js/jquery-3.2.1.slim.min.js
IP

89.46.106.29:0
ASN

#31034 Aruba S.p.A.

Magic

data

Size

849
Hash

250b8236e61c162b0265b0ac39cb52b0

496eed3aa1c0df2843d1762bd754c347e2cbbd15

e1e9be5975f012150cdd359862dba647c824205d4e686a5c42483d59ca5aa400

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

                                        GET /z1JKap/china.com/js/jquery-3.2.1.slim.min.js HTTP/1.1
Host: www.luciamangili.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.luciamangili.it/z1JKap/china.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        HTTP/2 404 Not Found
server: aruba-proxy
date: Thu, 09 Feb 2023 15:35:41 GMT
content-type: text/html; charset=iso-8859-1
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2

www.micstatic.com/common/js/business/global/sensors_track.js?r=1634120031144&r=1634120031144

104.18.21.229

200 OK

10007

URL HTTP/2

www.micstatic.com/common/js/business/global/sensors_track.js?r=1634120031144&r=1634120031144
IP

104.18.21.229:0
ASN

#13335 CLOUDFLARENET

Magic

data

Size

10007
Hash

c6b3585528f7a800c2b84672721c3bc5

93799afd72fc57cfe364ed4d5ee4c4534463e310

eeaa405d357baf81d901c2a1d29501b59ead0b629babf3beec639f62856159c3

HTTP Headers

                                        GET /common/js/business/global/sensors_track.js?r=1634120031144&r=1634120031144 HTTP/1.1
Host: www.micstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.luciamangili.it/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        HTTP/2 200 OK
date: Thu, 09 Feb 2023 15:35:42 GMT
content-type: application/javascript
last-modified: Fri, 19 Nov 2021 07:38:32 GMT
etag: W/"61975478-a860"
expires: Sun, 06 Feb 2033 15:35:42 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
content-encoding: gzip
cf-cache-status: HIT
age: 25018
vary: Accept-Encoding
server: cloudflare
cf-ray: 796dad2d689d0b49-OSL
X-Firefox-Spdy: h2

fa.micstatic.com/probe/map.gif?v=211112&t=a&d=%7Bpub%3A%7Bpuid%3A%221gord4nhpd54%22%2Clinkid%3A%221gord4nhpd54%22%2Curl%3A%22www.luciamangili.it%252Fz1JKap%252Fchina.com%252F%22%2Creferrer%3A%22%22%2Cpdr%3A%221%22%2Ctz%3A%220%22%2Clan%3A%22en-US%22%2Cbn%3A%22Firefox%22%2Cnv%3A%22105.0%22%2Con%3A%22Windows%22%2Cov%3A%2210%22%7D%2Ccookies%3A%7B%7D%2Ccore%3A%7Ba%3A%22-1%22%2Cb%3A%224%22%2Cc%3A%22208%22%2Cd%3A%220%22%2Ce%3A%2254%22%2Cf%3A%220%22%2Cst%3A%22-1%22%2Cg%3A%22525%22%2Ch%3A%221476%22%2Ci%3A%221166%22%2Cj%3A%22-1%22%2Cl%3A%2221%22%2Co%3A%220%22%2Clcp%3A%22-1%22%2Cfcp%3A%22997%22%2Cm%3A%220%22%2Ck%3A%222093%22%2Cp%3A%22158%22%2Cx%3A%7B%7D%2Cs%3A%221280*1024%7C1280*939%22%7D%7D

104.18.24.206

204 No Content

URL HTTP/2

fa.micstatic.com/probe/map.gif?v=211112&t=a&d=%7Bpub%3A%7Bpuid%3A%221gord4nhpd54%22%2Clinkid%3A%221gord4nhpd54%22%2Curl%3A%22www.luciamangili.it%252Fz1JKap%252Fchina.com%252F%22%2Creferrer%3A%22%22%2Cpdr%3A%221%22%2Ctz%3A%220%22%2Clan%3A%22en-US%22%2Cbn%3A%22Firefox%22%2Cnv%3A%22105.0%22%2Con%3A%22Windows%22%2Cov%3A%2210%22%7D%2Ccookies%3A%7B%7D%2Ccore%3A%7Ba%3A%22-1%22%2Cb%3A%224%22%2Cc%3A%22208%22%2Cd%3A%220%22%2Ce%3A%2254%22%2Cf%3A%220%22%2Cst%3A%22-1%22%2Cg%3A%22525%22%2Ch%3A%221476%22%2Ci%3A%221166%22%2Cj%3A%22-1%22%2Cl%3A%2221%22%2Co%3A%220%22%2Clcp%3A%22-1%22%2Cfcp%3A%22997%22%2Cm%3A%220%22%2Ck%3A%222093%22%2Cp%3A%22158%22%2Cx%3A%7B%7D%2Cs%3A%221280*1024%7C1280*939%22%7D%7D
IP

104.18.24.206:0
ASN

#13335 CLOUDFLARENET

Magic

Size

0
Hash

d41d8cd98f00b204e9800998ecf8427e

da39a3ee5e6b4b0d3255bfef95601890afd80709

e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

                                        GET /probe/map.gif?v=211112&t=a&d=%7Bpub%3A%7Bpuid%3A%221gord4nhpd54%22%2Clinkid%3A%221gord4nhpd54%22%2Curl%3A%22www.luciamangili.it%252Fz1JKap%252Fchina.com%252F%22%2Creferrer%3A%22%22%2Cpdr%3A%221%22%2Ctz%3A%220%22%2Clan%3A%22en-US%22%2Cbn%3A%22Firefox%22%2Cnv%3A%22105.0%22%2Con%3A%22Windows%22%2Cov%3A%2210%22%7D%2Ccookies%3A%7B%7D%2Ccore%3A%7Ba%3A%22-1%22%2Cb%3A%224%22%2Cc%3A%22208%22%2Cd%3A%220%22%2Ce%3A%2254%22%2Cf%3A%220%22%2Cst%3A%22-1%22%2Cg%3A%22525%22%2Ch%3A%221476%22%2Ci%3A%221166%22%2Cj%3A%22-1%22%2Cl%3A%2221%22%2Co%3A%220%22%2Clcp%3A%22-1%22%2Cfcp%3A%22997%22%2Cm%3A%220%22%2Ck%3A%222093%22%2Cp%3A%22158%22%2Cx%3A%7B%7D%2Cs%3A%221280*1024%7C1280*939%22%7D%7D HTTP/1.1
Host: fa.micstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.luciamangili.it/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 204 No Content
date: Thu, 09 Feb 2023 15:35:43 GMT
timing-allow-origin: *, *
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 796dad2f586b0afe-OSL
X-Firefox-Spdy: h2

r3.o.lencr.org/

23.36.77.32

200 OK

503

URL HTTP/1.1

r3.o.lencr.org/
IP

23.36.77.32:0
ASN

#20940 Akamai International B.V.

Magic

data

Size

503
Hash

1d885cfc22a04f1216c98dd64df5338a

589916a844b81fac40af88a772865b8e28dfb64e

40c0e55533794d72bbba4bc9d0f07fe0741e24ca23fd9b3e31d2830c77a51bf3

HTTP Headers

                                        POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "40C0E55533794D72BBBA4BC9D0F07FE0741E24CA23FD9B3E31D2830C77A51BF3"
Last-Modified: Wed, 08 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4760
Expires: Thu, 09 Feb 2023 16:55:03 GMT
Date: Thu, 09 Feb 2023 15:35:43 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503

URL HTTP/1.1

r3.o.lencr.org/
IP

23.36.77.32:0
ASN

#20940 Akamai International B.V.

Magic

data

Size

503
Hash

1d885cfc22a04f1216c98dd64df5338a

589916a844b81fac40af88a772865b8e28dfb64e

40c0e55533794d72bbba4bc9d0f07fe0741e24ca23fd9b3e31d2830c77a51bf3

HTTP Headers

                                        POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "40C0E55533794D72BBBA4BC9D0F07FE0741E24CA23FD9B3E31D2830C77A51BF3"
Last-Modified: Wed, 08 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4760
Expires: Thu, 09 Feb 2023 16:55:03 GMT
Date: Thu, 09 Feb 2023 15:35:43 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503

URL HTTP/1.1

r3.o.lencr.org/
IP

23.36.77.32:0
ASN

#20940 Akamai International B.V.

Magic

data

Size

503
Hash

1d885cfc22a04f1216c98dd64df5338a

589916a844b81fac40af88a772865b8e28dfb64e

40c0e55533794d72bbba4bc9d0f07fe0741e24ca23fd9b3e31d2830c77a51bf3

HTTP Headers

                                        POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "40C0E55533794D72BBBA4BC9D0F07FE0741E24CA23FD9B3E31D2830C77A51BF3"
Last-Modified: Wed, 08 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4760
Expires: Thu, 09 Feb 2023 16:55:03 GMT
Date: Thu, 09 Feb 2023 15:35:43 GMT
Connection: keep-alive

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3ab2faf0-d9a7-41a6-b5cf-bf6189f66342.jpeg

34.120.237.76

200 OK

11760

URL HTTP/2

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3ab2faf0-d9a7-41a6-b5cf-bf6189f66342.jpeg
IP

34.120.237.76:0
ASN

#15169 GOOGLE

Magic

JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

Size

11760
Hash

9203cfb9f0c1c958dd008eac55a9d3c4

6bdd1047590dd3fb54c15d5d6d38e7c86274b203

09770229be5ff3037708543e3204c66de84253b3a858a83a0e1672a04c0e9cb1

HTTP Headers

                                        GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3ab2faf0-d9a7-41a6-b5cf-bf6189f66342.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
server: nginx
content-length: 11760
x-amzn-requestid: b2863a01-4714-4554-a478-5402467b3448
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: AChJKHc_oAMFwlw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e4156d-1c5a3edf37bc7cc937c800d2;Sampled=0
x-amzn-remapped-date: Wed, 08 Feb 2023 21:34:37 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: euok7HXthk9GEynD8n9wXgf85lD0shxOdtT5VZvj-xHkoxEMxuohmA==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 570075675953459325e00b7bcd171df2.cloudfront.net (CloudFront), 1.1 google
date: Wed, 08 Feb 2023 21:42:38 GMT
age: 64385
etag: "6bdd1047590dd3fb54c15d5d6d38e7c86274b203"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

7450

URL HTTP/2

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0ac74c9c-b95e-40f4-a5ca-7180c40cc241.jpeg
IP

34.120.237.76:0
ASN

#15169 GOOGLE

Magic

JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

Size

7450
Hash

ce710ab5746832fe637fada3e6d63abf

d545c85d4a8cf92dc8b88db0a056623d1ef7a943

40bae4a2fb9dd60e9339d15ad0838f3ca83b5b6275c35cd22878b6783fcd6247

HTTP Headers

                                        GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0ac74c9c-b95e-40f4-a5ca-7180c40cc241.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
server: nginx
content-length: 7450
x-amzn-requestid: c3dabd4b-797b-4bbe-8824-5f502ff477b0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fmJ2aG-IoAMFfnQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d8bcf5-68de905b2ed5bfe46a87e688;Sampled=0
x-amzn-remapped-date: Tue, 31 Jan 2023 07:02:13 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: AX-TsURes3Bn0RrAnH7TnsouJdkcOpbq7f7KAzPMWq4RMBH8FWMz7g==
via: 1.1 1cc6ed0d2d3dd9529ce544f9dfe61a52.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Wed, 08 Feb 2023 17:45:22 GMT
age: 78621
etag: "d545c85d4a8cf92dc8b88db0a056623d1ef7a943"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

8150

URL HTTP/2

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc03326d1-bbfd-4654-a9db-ac431757b9f6.jpeg
IP

34.120.237.76:0
ASN

#15169 GOOGLE

Magic

JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

Size

8150
Hash

764b732e88dd1e9c1824529b24b3dffc

2ba954a51c2972b267ae0536e343e608aa9aa7f4

a1efdf03b14bb05cf8e407b92476592c35fa2d27c5e66705322abdb4c6412a06

HTTP Headers

                                        GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc03326d1-bbfd-4654-a9db-ac431757b9f6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
server: nginx
content-length: 8150
x-amzn-requestid: 3834493a-4162-4cc9-b67c-541cc9be895b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fwD8IH0TIAMFWqQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dcb380-3746ff7b0a6894366efa848e;Sampled=0
x-amzn-remapped-date: Fri, 03 Feb 2023 07:10:56 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: HNuUU4SaVvuPbW0clgJa6UZ-0zefgWJWfIJEsz_yCfKiCrx2wsu6vA==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 e4d3d5aafc7d7d582423c073065ab562.cloudfront.net (CloudFront), 1.1 google
date: Thu, 09 Feb 2023 09:31:09 GMT
age: 21874
etag: "2ba954a51c2972b267ae0536e343e608aa9aa7f4"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

10472

URL HTTP/2

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6ec996f6-8867-41f0-9850-ad04d05e22e6.jpeg
IP

34.120.237.76:0
ASN

#15169 GOOGLE

Magic

JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

Size

10472
Hash

464812429ec9f5c766def4ac26e86e4f

170a5d6fcaa69c78896ed8a37442a27c6309c09a

1248df6127626b254420b6ddabba6fba12066c9b7f314386c25ac51781f59060

HTTP Headers

                                        GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6ec996f6-8867-41f0-9850-ad04d05e22e6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
server: nginx
content-length: 10472
x-amzn-requestid: f43c32c6-0bb3-4154-934d-cd0ad1e3edf7
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fv73mHmooAMFRFA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dca696-700ab104674033036aba0878;Sampled=0
x-amzn-remapped-date: Fri, 03 Feb 2023 06:15:50 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 2kp0tBfU8v-pe5Tft8WnSQKV5deSlUbRVEGthGejjT4uXlbbv1IiAg==
via: 1.1 c7c3cdef911c9ee3c1a83a78f425dc5a.cloudfront.net (CloudFront), 1.1 d6a002c70d55f415107618b0750d493c.cloudfront.net (CloudFront), 1.1 google
date: Wed, 08 Feb 2023 19:00:11 GMT
age: 74132
etag: "170a5d6fcaa69c78896ed8a37442a27c6309c09a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

8637

URL HTTP/2

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb92005b3-7a69-411c-9afb-60b86ab8c5da.jpeg
IP

34.120.237.76:0
ASN

#15169 GOOGLE

Magic

JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

Size

8637
Hash

b0c5e12696e3ee13041d043084828210

c48927fb23f59e0949d388086c197699c8f19d1b

47838e958555ff6799d4d1d3994913943726daba5294cd89afe9036628ef6fdb

HTTP Headers

                                        GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb92005b3-7a69-411c-9afb-60b86ab8c5da.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
server: nginx
content-length: 8637
x-amzn-requestid: fa797448-32c3-4438-a192-5291c48b1d85
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: AChJKFq9oAMFgog=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e4156d-46ff32923a2763b45a5194f4;Sampled=0
x-amzn-remapped-date: Wed, 08 Feb 2023 21:34:37 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 2olwTLHKbCas7GcQiRz22bk_I646VcTxN3Yv_ObBVgeGC0l73GNh8A==
via: 1.1 efe54e8b68e074d39b2ecd249f85100a.cloudfront.net (CloudFront), 1.1 e66162aafd55b64ba1478ff7105150fa.cloudfront.net (CloudFront), 1.1 google
date: Wed, 08 Feb 2023 21:42:27 GMT
age: 64396
etag: "c48927fb23f59e0949d388086c197699c8f19d1b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

8717

URL HTTP/2

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F844d5320-b850-4dd9-87c4-2b4f17eb895e.jpeg
IP

34.120.237.76:0
ASN

#15169 GOOGLE

Magic

JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

Size

8717
Hash

82ed633b05ccadc8b87e83413641f1ef

aafed39990cf6a3391d53355085d816167a500fa

c9202e36b231d0a9a9cba1ff8f570e5b0fbba215eb6b28e3989fd442ee7f5835

HTTP Headers

                                        GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F844d5320-b850-4dd9-87c4-2b4f17eb895e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
server: nginx
content-length: 8717
x-amzn-requestid: dbb8b5a2-d3f6-42e2-8778-da19de081cb8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f2c0LHaiIAMF5cA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63df41b4-309b6b1f651f68453dd52f55;Sampled=0
x-amzn-remapped-date: Sun, 05 Feb 2023 05:42:12 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: hBfl0rPzn_iOD9xRlc236_IEvyGlK5WteH1y4cd0aYxlFzd3RVfgkQ==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 64f86ae1c24221f3a2e4d653d6dbc416.cloudfront.net (CloudFront), 1.1 google
date: Wed, 08 Feb 2023 21:42:47 GMT
age: 64376
etag: "aafed39990cf6a3391d53355085d816167a500fa"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

fa.micstatic.com/sc/sa.gif?project=MICEN&data=eyJkaXN0aW5jdF9pZCI6IjE4NjM2ZDI2MGFjNGE3LTBjODE1ZTU0MjQxMzU3OC1jNTA1NDI1LTEzMTA3MjAtMTg2MzZkMjYwYWQzZmEiLCJsaWIiOnsiJGxpYiI6ImpzIiwiJGxpYl9tZXRob2QiOiJjb2RlIiwiJGxpYl92ZXJzaW9uIjoiMS4xNS4xMyJ9LCJwcm9wZXJ0aWVzIjp7IiR0aW1lem9uZV9vZmZzZXQiOjAsIiRzY3JlZW5faGVpZ2h0IjoxMDI0LCIkc2NyZWVuX3dpZHRoIjoxMjgwLCIkbGliIjoianMiLCIkbGliX3ZlcnNpb24iOiIxLjE1LjEzIiwiJGxhdGVzdF90cmFmZmljX3NvdXJjZV90eXBlIjoi6ZCp5a2Y5bi05ai05L6A5Zm6IiwiJGxhdGVzdF9zZWFyY2hfa2V5d29yZCI6IumPiO6BhOW9h%2BmNkuadv%2BKCrOezremQqeWtmOW4tOmOteaSs%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%3D%3D&ext=crc%3D-344418463

104.18.24.206

200 OK

URL HTTP/2

fa.micstatic.com/sc/sa.gif?project=MICEN&data=eyJkaXN0aW5jdF9pZCI6IjE4NjM2ZDI2MGFjNGE3LTBjODE1ZTU0MjQxMzU3OC1jNTA1NDI1LTEzMTA3MjAtMTg2MzZkMjYwYWQzZmEiLCJsaWIiOnsiJGxpYiI6ImpzIiwiJGxpYl9tZXRob2QiOiJjb2RlIiwiJGxpYl92ZXJzaW9uIjoiMS4xNS4xMyJ9LCJwcm9wZXJ0aWVzIjp7IiR0aW1lem9uZV9vZmZzZXQiOjAsIiRzY3JlZW5faGVpZ2h0IjoxMDI0LCIkc2NyZWVuX3dpZHRoIjoxMjgwLCIkbGliIjoianMiLCIkbGliX3ZlcnNpb24iOiIxLjE1LjEzIiwiJGxhdGVzdF90cmFmZmljX3NvdXJjZV90eXBlIjoi6ZCp5a2Y5bi05ai05L6A5Zm6IiwiJGxhdGVzdF9zZWFyY2hfa2V5d29yZCI6IumPiO6BhOW9h%2BmNkuadv%2BKCrOezremQqeWtmOW4tOmOteaSs%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%3D%3D&ext=crc%3D-344418463
IP

104.18.24.206:0
ASN

#13335 CLOUDFLARENET

Magic

GIF image data, version 89a, 1 x 1\012- data

Size

43
Hash

ad4b0f606e0f8465bc4c4c170b37e1a3

50b30fd5f87c85fe5cba2635cb83316ca71250d7

cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda

HTTP Headers

                                        GET /sc/sa.gif?project=MICEN&data=eyJkaXN0aW5jdF9pZCI6IjE4NjM2ZDI2MGFjNGE3LTBjODE1ZTU0MjQxMzU3OC1jNTA1NDI1LTEzMTA3MjAtMTg2MzZkMjYwYWQzZmEiLCJsaWIiOnsiJGxpYiI6ImpzIiwiJGxpYl9tZXRob2QiOiJjb2RlIiwiJGxpYl92ZXJzaW9uIjoiMS4xNS4xMyJ9LCJwcm9wZXJ0aWVzIjp7IiR0aW1lem9uZV9vZmZzZXQiOjAsIiRzY3JlZW5faGVpZ2h0IjoxMDI0LCIkc2NyZWVuX3dpZHRoIjoxMjgwLCIkbGliIjoianMiLCIkbGliX3ZlcnNpb24iOiIxLjE1LjEzIiwiJGxhdGVzdF90cmFmZmljX3NvdXJjZV90eXBlIjoi6ZCp5a2Y5bi05ai05L6A5Zm6IiwiJGxhdGVzdF9zZWFyY2hfa2V5d29yZCI6IumPiO6BhOW9h%2BmNkuadv%2BKCrOezremQqeWtmOW4tOmOteaSs%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%3D%3D&ext=crc%3D-344418463 HTTP/1.1
Host: fa.micstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.luciamangili.it/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
date: Thu, 09 Feb 2023 15:35:43 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
access-control-allow-origin: *
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: Mon, 28 Sep 1970 05:00:00 GMT
timing-allow-origin: *
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 796dad2f58680afe-OSL
X-Firefox-Spdy: h2

104.18.24.206

200 OK

URL HTTP/2

fa.micstatic.com/sc/sa.gif?project=MICEN&data=eyJkaXN0aW5jdF9pZCI6IjE4NjM2ZDI2MGFjNGE3LTBjODE1ZTU0MjQxMzU3OC1jNTA1NDI1LTEzMTA3MjAtMTg2MzZkMjYwYWQzZmEiLCJsaWIiOnsiJGxpYiI6ImpzIiwiJGxpYl9tZXRob2QiOiJjb2RlIiwiJGxpYl92ZXJzaW9uIjoiMS4xNS4xMyJ9LCJwcm9wZXJ0aWVzIjp7IiRmaXJzdF92aXNpdF90aW1lIjoiMjAyMy0wMi0wOSAxNTozNjo0Mi40MjAiLCIkZmlyc3RfcmVmZXJyZXIiOiIiLCIkZmlyc3RfYnJvd3Nlcl9sYW5ndWFnZSI6ImVuLVVTIiwiJGZpcnN0X2Jyb3dzZXJfY2hhcnNldCI6IkdCSyIsIiRmaXJzdF90cmFmZmljX3NvdXJjZV90eXBlIjoi6ZCp5a2Y5bi05ai05L6A5Zm6IiwiJGZpcnN0X3NlYXJjaF9rZXl3b3JkIjoi6Y%2BI7oGE5b2H6Y2S5p2%2F4oKs57Ot6ZCp5a2Y5bi06Y615pKz57SRIn0sImFub255bW91c19pZCI6IjE4NjM2ZDI2MGFjNGE3LTBjODE1ZTU0MjQxMzU3OC1jNTA1NDI1LTEzMTA3MjAtMTg2MzZkMjYwYWQzZmEiLCJ0eXBlIjoicHJvZmlsZV9zZXRfb25jZSIsIl90cmFja19pZCI6MjU5MzMyNDIxfQ%3D%3D&ext=crc%3D-1583767522
IP

104.18.24.206:0
ASN

#13335 CLOUDFLARENET

Magic

GIF image data, version 89a, 1 x 1\012- data

Size

43
Hash

ad4b0f606e0f8465bc4c4c170b37e1a3

50b30fd5f87c85fe5cba2635cb83316ca71250d7

cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda

HTTP Headers

                                        GET /sc/sa.gif?project=MICEN&data=eyJkaXN0aW5jdF9pZCI6IjE4NjM2ZDI2MGFjNGE3LTBjODE1ZTU0MjQxMzU3OC1jNTA1NDI1LTEzMTA3MjAtMTg2MzZkMjYwYWQzZmEiLCJsaWIiOnsiJGxpYiI6ImpzIiwiJGxpYl9tZXRob2QiOiJjb2RlIiwiJGxpYl92ZXJzaW9uIjoiMS4xNS4xMyJ9LCJwcm9wZXJ0aWVzIjp7IiRmaXJzdF92aXNpdF90aW1lIjoiMjAyMy0wMi0wOSAxNTozNjo0Mi40MjAiLCIkZmlyc3RfcmVmZXJyZXIiOiIiLCIkZmlyc3RfYnJvd3Nlcl9sYW5ndWFnZSI6ImVuLVVTIiwiJGZpcnN0X2Jyb3dzZXJfY2hhcnNldCI6IkdCSyIsIiRmaXJzdF90cmFmZmljX3NvdXJjZV90eXBlIjoi6ZCp5a2Y5bi05ai05L6A5Zm6IiwiJGZpcnN0X3NlYXJjaF9rZXl3b3JkIjoi6Y%2BI7oGE5b2H6Y2S5p2%2F4oKs57Ot6ZCp5a2Y5bi06Y615pKz57SRIn0sImFub255bW91c19pZCI6IjE4NjM2ZDI2MGFjNGE3LTBjODE1ZTU0MjQxMzU3OC1jNTA1NDI1LTEzMTA3MjAtMTg2MzZkMjYwYWQzZmEiLCJ0eXBlIjoicHJvZmlsZV9zZXRfb25jZSIsIl90cmFja19pZCI6MjU5MzMyNDIxfQ%3D%3D&ext=crc%3D-1583767522 HTTP/1.1
Host: fa.micstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.luciamangili.it/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
date: Thu, 09 Feb 2023 15:35:43 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
access-control-allow-origin: *
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: Mon, 28 Sep 1970 05:00:00 GMT
timing-allow-origin: *
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 796dad2f68700afe-OSL
X-Firefox-Spdy: h2

fa.micstatic.com/sc/sa.gif?project=MICEN&data=eyJkaXN0aW5jdF9pZCI6IjE4NjM2ZDI2MGFjNGE3LTBjODE1ZTU0MjQxMzU3OC1jNTA1NDI1LTEzMTA3MjAtMTg2MzZkMjYwYWQzZmEiLCJsaWIiOnsiJGxpYiI6ImpzIiwiJGxpYl9tZXRob2QiOiJjb2RlIiwiJGxpYl92ZXJzaW9uIjoiMS4xNS4xMyJ9LCJwcm9wZXJ0aWVzIjp7IiR0aW1lem9uZV9vZmZzZXQiOjAsIiRzY3JlZW5faGVpZ2h0IjoxMDI0LCIkc2NyZWVuX3dpZHRoIjoxMjgwLCIkbGliIjoianMiLCIkbGliX3ZlcnNpb24iOiIxLjE1LjEzIiwiJGxhdGVzdF90cmFmZmljX3NvdXJjZV90eXBlIjoi6ZCp5a2Y5bi05ai05L6A5Zm6IiwiJGxhdGVzdF9zZWFyY2hfa2V5d29yZCI6IumPiO6BhOW9h%2BmNkuadv%2BKCrOezremQqeWtmOW4tOmOteaSs%2Be0kSIsIiRsYXRlc3RfcmVmZXJyZXIiOiIiLCJwdl9pZCI6IjFnb3JkNG45MGEwZiIsInBsYXRmb3JtX3R5cGUiOiIxIiwibGFuZ3VhZ2UiOiIxIiwibG9naW5faWQiOiIiLCIkaXNfZmlyc3RfZGF5Ijp0cnVlLCIkbGF0ZXN0X3JlZmVycmVyX2hvc3QiOiIiLCIkdXJsIjoiaHR0cHM6Ly93d3cubHVjaWFtYW5naWxpLml0L3oxSkthcC9jaGluYS5jb20vIn0sImFub255bW91c19pZCI6IjE4NjM2ZDI2MGFjNGE3LTBjODE1ZTU0MjQxMzU3OC1jNTA1NDI1LTEzMTA3MjAtMTg2MzZkMjYwYWQzZmEiLCJ0eXBlIjoidHJhY2siLCJldmVudCI6ImZvcm1BY3Rpb24iLCJfdHJhY2tfaWQiOjcxNzAxMjQzNH0%3D&ext=crc%3D-1442191965

104.18.24.206

200 OK

URL HTTP/2

fa.micstatic.com/sc/sa.gif?project=MICEN&data=eyJkaXN0aW5jdF9pZCI6IjE4NjM2ZDI2MGFjNGE3LTBjODE1ZTU0MjQxMzU3OC1jNTA1NDI1LTEzMTA3MjAtMTg2MzZkMjYwYWQzZmEiLCJsaWIiOnsiJGxpYiI6ImpzIiwiJGxpYl9tZXRob2QiOiJjb2RlIiwiJGxpYl92ZXJzaW9uIjoiMS4xNS4xMyJ9LCJwcm9wZXJ0aWVzIjp7IiR0aW1lem9uZV9vZmZzZXQiOjAsIiRzY3JlZW5faGVpZ2h0IjoxMDI0LCIkc2NyZWVuX3dpZHRoIjoxMjgwLCIkbGliIjoianMiLCIkbGliX3ZlcnNpb24iOiIxLjE1LjEzIiwiJGxhdGVzdF90cmFmZmljX3NvdXJjZV90eXBlIjoi6ZCp5a2Y5bi05ai05L6A5Zm6IiwiJGxhdGVzdF9zZWFyY2hfa2V5d29yZCI6IumPiO6BhOW9h%2BmNkuadv%2BKCrOezremQqeWtmOW4tOmOteaSs%2Be0kSIsIiRsYXRlc3RfcmVmZXJyZXIiOiIiLCJwdl9pZCI6IjFnb3JkNG45MGEwZiIsInBsYXRmb3JtX3R5cGUiOiIxIiwibGFuZ3VhZ2UiOiIxIiwibG9naW5faWQiOiIiLCIkaXNfZmlyc3RfZGF5Ijp0cnVlLCIkbGF0ZXN0X3JlZmVycmVyX2hvc3QiOiIiLCIkdXJsIjoiaHR0cHM6Ly93d3cubHVjaWFtYW5naWxpLml0L3oxSkthcC9jaGluYS5jb20vIn0sImFub255bW91c19pZCI6IjE4NjM2ZDI2MGFjNGE3LTBjODE1ZTU0MjQxMzU3OC1jNTA1NDI1LTEzMTA3MjAtMTg2MzZkMjYwYWQzZmEiLCJ0eXBlIjoidHJhY2siLCJldmVudCI6ImZvcm1BY3Rpb24iLCJfdHJhY2tfaWQiOjcxNzAxMjQzNH0%3D&ext=crc%3D-1442191965
IP

104.18.24.206:0
ASN

#13335 CLOUDFLARENET

Magic

GIF image data, version 89a, 1 x 1\012- data

Size

43
Hash

ad4b0f606e0f8465bc4c4c170b37e1a3

50b30fd5f87c85fe5cba2635cb83316ca71250d7

cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda

HTTP Headers

                                        GET /sc/sa.gif?project=MICEN&data=eyJkaXN0aW5jdF9pZCI6IjE4NjM2ZDI2MGFjNGE3LTBjODE1ZTU0MjQxMzU3OC1jNTA1NDI1LTEzMTA3MjAtMTg2MzZkMjYwYWQzZmEiLCJsaWIiOnsiJGxpYiI6ImpzIiwiJGxpYl9tZXRob2QiOiJjb2RlIiwiJGxpYl92ZXJzaW9uIjoiMS4xNS4xMyJ9LCJwcm9wZXJ0aWVzIjp7IiR0aW1lem9uZV9vZmZzZXQiOjAsIiRzY3JlZW5faGVpZ2h0IjoxMDI0LCIkc2NyZWVuX3dpZHRoIjoxMjgwLCIkbGliIjoianMiLCIkbGliX3ZlcnNpb24iOiIxLjE1LjEzIiwiJGxhdGVzdF90cmFmZmljX3NvdXJjZV90eXBlIjoi6ZCp5a2Y5bi05ai05L6A5Zm6IiwiJGxhdGVzdF9zZWFyY2hfa2V5d29yZCI6IumPiO6BhOW9h%2BmNkuadv%2BKCrOezremQqeWtmOW4tOmOteaSs%2Be0kSIsIiRsYXRlc3RfcmVmZXJyZXIiOiIiLCJwdl9pZCI6IjFnb3JkNG45MGEwZiIsInBsYXRmb3JtX3R5cGUiOiIxIiwibGFuZ3VhZ2UiOiIxIiwibG9naW5faWQiOiIiLCIkaXNfZmlyc3RfZGF5Ijp0cnVlLCIkbGF0ZXN0X3JlZmVycmVyX2hvc3QiOiIiLCIkdXJsIjoiaHR0cHM6Ly93d3cubHVjaWFtYW5naWxpLml0L3oxSkthcC9jaGluYS5jb20vIn0sImFub255bW91c19pZCI6IjE4NjM2ZDI2MGFjNGE3LTBjODE1ZTU0MjQxMzU3OC1jNTA1NDI1LTEzMTA3MjAtMTg2MzZkMjYwYWQzZmEiLCJ0eXBlIjoidHJhY2siLCJldmVudCI6ImZvcm1BY3Rpb24iLCJfdHJhY2tfaWQiOjcxNzAxMjQzNH0%3D&ext=crc%3D-1442191965 HTTP/1.1
Host: fa.micstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.luciamangili.it/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        HTTP/2 200 OK
date: Thu, 09 Feb 2023 15:35:43 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
access-control-allow-origin: *
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: Mon, 28 Sep 1970 05:00:00 GMT
timing-allow-origin: *
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 796dad3099890afe-OSL
X-Firefox-Spdy: h2

region1.analytics.google.com/g/collect?v=2&tid=G-VEFCZRQMG4&gtm=45je3280&_p=1277393339&_gaz=1&cid=329261739.1675957003&ul=en-us&sr=1280x1024&uaW=1&_eu=BA&_s=1&sid=1675957002&sct=1&seg=0&dl=https%3A%2F%2Fwww.luciamangili.it%2Fz1JKap%2Fchina.com%2F&dt=Messages%20%7C%20Made%20ln%20Chlna&en=page_view&_fv=1&_ss=1&ep.Page_Hostname=www.luciamangili.it&ep.page_URL=https%3A%2F%2Fwww.luciamangili.it%2Fz1JKap%2Fchina.com%2F

216.239.32.36

204 No Content

URL HTTP/2

region1.analytics.google.com/g/collect?v=2&tid=G-VEFCZRQMG4&gtm=45je3280&_p=1277393339&_gaz=1&cid=329261739.1675957003&ul=en-us&sr=1280x1024&uaW=1&_eu=BA&_s=1&sid=1675957002&sct=1&seg=0&dl=https%3A%2F%2Fwww.luciamangili.it%2Fz1JKap%2Fchina.com%2F&dt=Messages%20%7C%20Made%20ln%20Chlna&en=page_view&_fv=1&_ss=1&ep.Page_Hostname=www.luciamangili.it&ep.page_URL=https%3A%2F%2Fwww.luciamangili.it%2Fz1JKap%2Fchina.com%2F
IP

216.239.32.36:0
ASN

#15169 GOOGLE

Magic

Size

0
Hash

d41d8cd98f00b204e9800998ecf8427e

da39a3ee5e6b4b0d3255bfef95601890afd80709

e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

                                        POST /g/collect?v=2&tid=G-VEFCZRQMG4&gtm=45je3280&_p=1277393339&_gaz=1&cid=329261739.1675957003&ul=en-us&sr=1280x1024&uaW=1&_eu=BA&_s=1&sid=1675957002&sct=1&seg=0&dl=https%3A%2F%2Fwww.luciamangili.it%2Fz1JKap%2Fchina.com%2F&dt=Messages%20%7C%20Made%20ln%20Chlna&en=page_view&_fv=1&_ss=1&ep.Page_Hostname=www.luciamangili.it&ep.page_URL=https%3A%2F%2Fwww.luciamangili.it%2Fz1JKap%2Fchina.com%2F HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.luciamangili.it
Connection: keep-alive
Referer: https://www.luciamangili.it/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0

                                        HTTP/2 204 No Content
access-control-allow-origin: https://www.luciamangili.it
date: Thu, 09 Feb 2023 15:35:43 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

216.58.211.3

200 OK

471

Report Overview

URL

IP

ASN

Submitted

Access

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (25)

#1 JS:Script (size: 38041)

#2 JS:Script (size: 1283)

#3 JS:Script (size: 85270)

#4 JS:Script (size: 239452)

#5 JS:Script (size: 85584)

#6 JS:Script (size: 12354)

#7 JS:Script (size: 43207)

#8 JS:Script (size: 108696)

#9 JS:Script (size: 386596)

#10 JS:Script (size: 627)

#11 JS:Script (size: 271795)

#12 JS:Script (size: 423)

#13 JS:Script (size: 39397)

#14 JS:Script (size: 50234)

#15 JS:Script (size: 1950)

#16 JS:Script (size: 0)

#17 JS:Script (size: 51039)

#18 JS:Script (size: 4241)

#19 JS:Script (size: 3901)

#20 JS:Script (size: 48944)

#21 JS:Script (size: 86715)

#1 JS:Eval (size: 401)

#2 JS:Eval (size: 232)

#3 JS:Eval (size: 232)

#4 JS:Eval (size: 232)

HTTP Transactions (77)

URL HTTP/1.1

IP

ASN

Magic

Size

Hash

Detections

HTTP Headers

URL HTTP/1.1

IP

ASN

Magic

Size

Hash

HTTP Headers

URL HTTP/1.1

IP

ASN

Magic

Size

Hash

HTTP Headers

URL HTTP/2

IP

ASN

Magic

Size

Hash

HTTP Headers

URL HTTP/1.1