| |  198.23.174.151 | 200 OK | 78 B |
URL User Request GET HTTP/2IP198.23.174.151:443 ASN#36352 AS-COLOCROSSING
CertificateIssuerLet's Encrypt Subjectitpost-new.top Fingerprint90:5A:8C:98:ED:2F:00:61:65:35:BC:7F:21:5E:62:14:5C:A7:53:5D ValidityWed, 07 Jun 2023 12:44:24 GMT - Tue, 05 Sep 2023 12:44:23 GMT
File typeHTML document, ASCII text, with no line terminators Hashdf35a9132d45f20f5de491aa3d39ec3c 2ed53886b7ae220ab1fe50e8fc21fb4f51b9548c 12ab923601f138549d5fb76290e9256d73ac156d49476a12f10ef864b45389b9
| Analyzer | Verdict | Alert |
|---|
| openphish | Poste Italiane S.p.A | |
GET / HTTP/1.1
Host: itpost-new.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 09 Jun 2023 12:18:27 GMT
content-type: text/html
content-length: 78
last-modified: Thu, 18 May 2023 14:29:31 GMT
etag: "6466364b-4e"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| itpost-new.top/static/js/ps.js | 198.23.174.151 | 200 OK | 691 B |
URL GET HTTP/2itpost-new.top/static/js/ps.js IP198.23.174.151:443 ASN#36352 AS-COLOCROSSING
CertificateIssuerLet's Encrypt Subjectitpost-new.top Fingerprint90:5A:8C:98:ED:2F:00:61:65:35:BC:7F:21:5E:62:14:5C:A7:53:5D ValidityWed, 07 Jun 2023 12:44:24 GMT - Tue, 05 Sep 2023 12:44:23 GMT
File typegzip compressed data, from Unix\012- data Hashd05fafe35bdb70357e596f591969f561 5e9718292cffde29d07f7d0374e446abd5354c9e dd6e59869eac88532560f65e5c7b0b9b3eb98690ea8d353b185ad1c1050aa7fe
| Analyzer | Verdict | Alert |
|---|
| openphish | Poste Italiane S.p.A | |
GET /static/js/ps.js HTTP/1.1
Host: itpost-new.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://itpost-new.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 09 Jun 2023 12:18:28 GMT
content-type: application/javascript
last-modified: Thu, 09 Mar 2023 07:30:03 GMT
vary: Accept-Encoding
etag: W/"64098afb-550"
expires: Sat, 10 Jun 2023 00:18:28 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| itpost-new.top/static/picture/logo-poste-italiane.png | 198.23.174.151 | 200 OK | 6.2 kB |
URL GET HTTP/2itpost-new.top/static/picture/logo-poste-italiane.png IP198.23.174.151:443 ASN#36352 AS-COLOCROSSING
CertificateIssuerLet's Encrypt Subjectitpost-new.top Fingerprint90:5A:8C:98:ED:2F:00:61:65:35:BC:7F:21:5E:62:14:5C:A7:53:5D ValidityWed, 07 Jun 2023 12:44:24 GMT - Tue, 05 Sep 2023 12:44:23 GMT
File typePNG image data, 194 x 25, 8-bit/color RGBA, non-interlaced\012- data Hash99ffebe9a3e9a00434679344590600e4 496812738522b36587902625b9ea31c973f95c80 4b76e5a6a06f430c4c3c7a801632cf646f4fac8bbe919ff14938396abb08ae0f
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Poste Italiane | | openphish | Poste Italiane S.p.A | |
GET /static/picture/logo-poste-italiane.png HTTP/1.1
Host: itpost-new.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://itpost-new.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 09 Jun 2023 12:18:28 GMT
content-type: image/png
content-length: 6189
last-modified: Fri, 24 Feb 2023 14:43:49 GMT
etag: "63f8cd25-182d"
expires: Sun, 09 Jul 2023 12:18:28 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| itpost-new.top/static/picture/spinner_giallo.gif | 198.23.174.151 | 200 OK | 34 kB |
URL GET HTTP/2itpost-new.top/static/picture/spinner_giallo.gif IP198.23.174.151:443 ASN#36352 AS-COLOCROSSING
CertificateIssuerLet's Encrypt Subjectitpost-new.top Fingerprint90:5A:8C:98:ED:2F:00:61:65:35:BC:7F:21:5E:62:14:5C:A7:53:5D ValidityWed, 07 Jun 2023 12:44:24 GMT - Tue, 05 Sep 2023 12:44:23 GMT
File typeGIF image data, version 89a, 150 x 150\012- data Hash442d51dab3205cf4c81de67e4bafdbda 52726f8f87116bd1fd03e9d99c0bb22afd168937 ea638c8244c7a5cc50e617807b1fc35637430f976e8210ef3d560a5eb059e5f5
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Poste Italiane | | openphish | Poste Italiane S.p.A | |
GET /static/picture/spinner_giallo.gif HTTP/1.1
Host: itpost-new.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://itpost-new.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 09 Jun 2023 12:18:28 GMT
content-type: image/gif
content-length: 33869
last-modified: Fri, 24 Feb 2023 12:13:02 GMT
etag: "63f8a9ce-844d"
expires: Sun, 09 Jul 2023 12:18:28 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| itpost-new.top/ResourceConfig/urlConfig.json | 198.23.174.151 | 200 OK | 777 B |
URL GET HTTP/2itpost-new.top/ResourceConfig/urlConfig.json IP198.23.174.151:443 ASN#36352 AS-COLOCROSSING
CertificateIssuerLet's Encrypt Subjectitpost-new.top Fingerprint90:5A:8C:98:ED:2F:00:61:65:35:BC:7F:21:5E:62:14:5C:A7:53:5D ValidityWed, 07 Jun 2023 12:44:24 GMT - Tue, 05 Sep 2023 12:44:23 GMT
File typeUnicode text, UTF-8 text, with CRLF line terminators Hash5095c5467f50d0dd728ed3a51da7af7f b9f7544d1127af067d0de170bff57fb43855c8a5 df13fc66bc24396bd0a13532c8c59f71b25e7e79c34a4c26bb0c4ef2d1c6b421
| Analyzer | Verdict | Alert |
|---|
| openphish | Poste Italiane S.p.A | |
GET /ResourceConfig/urlConfig.json HTTP/1.1
Host: itpost-new.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://itpost-new.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 09 Jun 2023 12:18:28 GMT
content-type: application/json
content-length: 777
last-modified: Thu, 25 May 2023 16:39:57 GMT
etag: "646f8f5d-309"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| itpost-new.top/favicon.ico | 198.23.174.151 | 404 Not Found | 146 B |
URL GET HTTP/2itpost-new.top/favicon.ico IP198.23.174.151:443 ASN#36352 AS-COLOCROSSING
CertificateIssuerLet's Encrypt Subjectitpost-new.top Fingerprint90:5A:8C:98:ED:2F:00:61:65:35:BC:7F:21:5E:62:14:5C:A7:53:5D ValidityWed, 07 Jun 2023 12:44:24 GMT - Tue, 05 Sep 2023 12:44:23 GMT
File typeHTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators Hash8eec510e57f5f732fd2cce73df7b73ef 3c0af39ecb3753c5fee3b53d063c7286019eac3b 55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Poste Italiane | | openphish | Poste Italiane S.p.A | |
GET /favicon.ico HTTP/1.1
Host: itpost-new.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://itpost-new.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Fri, 09 Jun 2023 12:18:28 GMT
content-type: text/html
content-length: 146
X-Firefox-Spdy: h2
|
|
| admin-123123.xyz/websocket/8836cd1548f252f76944f82ef192d354 | 23.95.173.108 | | 0 B |
URL admin-123123.xyz/websocket/8836cd1548f252f76944f82ef192d354 IP23.95.173.108:0 ASN#36352 AS-COLOCROSSING
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Poste Italiane |
GET /websocket/8836cd1548f252f76944f82ef192d354 HTTP/1.1
Host: admin-123123.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://itpost-new.top
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: KdSHkt7Ir1ZAhBR1YgCvMA==
DNT: 1
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101
Server: nginx
Date: Fri, 09 Jun 2023 12:18:30 GMT
Connection: upgrade
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: POST, GET, OPTIONS, DELETE
Access-Control-Max-Age: 3600
Access-Control-Allow-Headers: *
Upgrade: websocket
Sec-WebSocket-Accept: TpMdBQkBPZOj3MOgN+qo1zFNLEo=
Sec-WebSocket-Extensions: permessage-deflate
|
|
| itpost-new.top/static/css/base.css | 198.23.174.151 | 200 OK | 411 B |
URL GET HTTP/2itpost-new.top/static/css/base.css IP198.23.174.151:443 ASN#36352 AS-COLOCROSSING
CertificateIssuerLet's Encrypt Subjectitpost-new.top Fingerprint90:5A:8C:98:ED:2F:00:61:65:35:BC:7F:21:5E:62:14:5C:A7:53:5D ValidityWed, 07 Jun 2023 12:44:24 GMT - Tue, 05 Sep 2023 12:44:23 GMT
Hash523dbf675d44dbbb4cefa533b6cc8643 a2f3a6a7de2e183058e1669ad810835b1a4a40bd 118e382bb76a741902139edc50f00880cd2dd2d7990c964cf143778bc12d7715
| Analyzer | Verdict | Alert |
|---|
| openphish | Poste Italiane S.p.A | |
GET /static/css/base.css HTTP/1.1
Host: itpost-new.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://itpost-new.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 09 Jun 2023 12:18:31 GMT
content-type: text/css
content-length: 411
last-modified: Fri, 24 Feb 2023 14:44:17 GMT
etag: "63f8cd41-19b"
expires: Sat, 10 Jun 2023 00:18:31 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| itpost-new.top/static/css/retina.css | 198.23.174.151 | 200 OK | 59 B |
URL GET HTTP/2itpost-new.top/static/css/retina.css IP198.23.174.151:443 ASN#36352 AS-COLOCROSSING
CertificateIssuerLet's Encrypt Subjectitpost-new.top Fingerprint90:5A:8C:98:ED:2F:00:61:65:35:BC:7F:21:5E:62:14:5C:A7:53:5D ValidityWed, 07 Jun 2023 12:44:24 GMT - Tue, 05 Sep 2023 12:44:23 GMT
Hasha67b903fff6479d632d18f14a27426e0 1f2cb4e619fedbf0d56befe0fa6bcdfe47c2b817 63da155423ec23fe95f4baa73ba0f41e16401e34a929d3de7571d419a5de2ee9
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Poste Italiane | | openphish | Poste Italiane S.p.A | |
GET /static/css/retina.css HTTP/1.1
Host: itpost-new.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://itpost-new.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 09 Jun 2023 12:18:31 GMT
content-type: text/css
content-length: 59
last-modified: Fri, 24 Feb 2023 14:44:17 GMT
etag: "63f8cd41-3b"
expires: Sat, 10 Jun 2023 00:18:31 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| itpost-new.top/static/css/persistent-placeholder.css | 198.23.174.151 | 200 OK | 386 B |
URL GET HTTP/2itpost-new.top/static/css/persistent-placeholder.css IP198.23.174.151:443 ASN#36352 AS-COLOCROSSING
CertificateIssuerLet's Encrypt Subjectitpost-new.top Fingerprint90:5A:8C:98:ED:2F:00:61:65:35:BC:7F:21:5E:62:14:5C:A7:53:5D ValidityWed, 07 Jun 2023 12:44:24 GMT - Tue, 05 Sep 2023 12:44:23 GMT
File typeASCII text, with very long lines (324), with CRLF, LF line terminators Hasha547b67c1f11cdb24368a42de1539bc3 6fa9a476fa231e25fe0f90da73051c13e2d47bf9 54473b4d4a534ef0efad2e131c76f8db768fe8a6154cd93bd3b17cad79d6ddc2
| Analyzer | Verdict | Alert |
|---|
| openphish | Poste Italiane S.p.A | |
GET /static/css/persistent-placeholder.css HTTP/1.1
Host: itpost-new.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://itpost-new.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 09 Jun 2023 12:18:31 GMT
content-type: text/css
content-length: 386
last-modified: Fri, 24 Feb 2023 14:44:17 GMT
etag: "63f8cd41-182"
expires: Sat, 10 Jun 2023 00:18:31 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| itpost-new.top/static/picture/logo-poste-italiane-small.png | 198.23.174.151 | 200 OK | 1.7 kB |
URL GET HTTP/2itpost-new.top/static/picture/logo-poste-italiane-small.png IP198.23.174.151:443 ASN#36352 AS-COLOCROSSING
CertificateIssuerLet's Encrypt Subjectitpost-new.top Fingerprint90:5A:8C:98:ED:2F:00:61:65:35:BC:7F:21:5E:62:14:5C:A7:53:5D ValidityWed, 07 Jun 2023 12:44:24 GMT - Tue, 05 Sep 2023 12:44:23 GMT
File typePNG image data, 109 x 14, 8-bit/color RGBA, non-interlaced\012- data Hasha260babf05d96f697264bbb8fd16807d b395fe3b73e40c8084d2baeb2517e89f019218bf 41171011db6a6fed5cf69b1acbe8638018b2ee182fb037cd77288eeff5443c48
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Poste Italiane | | openphish | Poste Italiane S.p.A | |
GET /static/picture/logo-poste-italiane-small.png HTTP/1.1
Host: itpost-new.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://itpost-new.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 09 Jun 2023 12:18:31 GMT
content-type: image/png
content-length: 1654
last-modified: Fri, 24 Feb 2023 14:43:49 GMT
etag: "63f8cd25-676"
expires: Sun, 09 Jul 2023 12:18:31 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| itpost-new.top/static/picture/ico-cruscotto.png | 198.23.174.151 | 200 OK | 570 B |
URL GET HTTP/2itpost-new.top/static/picture/ico-cruscotto.png IP198.23.174.151:443 ASN#36352 AS-COLOCROSSING
CertificateIssuerLet's Encrypt Subjectitpost-new.top Fingerprint90:5A:8C:98:ED:2F:00:61:65:35:BC:7F:21:5E:62:14:5C:A7:53:5D ValidityWed, 07 Jun 2023 12:44:24 GMT - Tue, 05 Sep 2023 12:44:23 GMT
File typePNG image data, 25 x 25, 8-bit/color RGBA, interlaced\012- data Hash1bcc214b910d37ef17a88cb25094907d 301790dc2b6f8f4568e2f099a9b270d8bac570d1 86ba6cfed92e1d8005b78b9202612c88a2aed9e022cc8b46fac943f9817b4481
| Analyzer | Verdict | Alert |
|---|
| openphish | Poste Italiane S.p.A | |
GET /static/picture/ico-cruscotto.png HTTP/1.1
Host: itpost-new.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://itpost-new.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 09 Jun 2023 12:18:31 GMT
content-type: image/png
content-length: 570
last-modified: Fri, 24 Feb 2023 14:43:49 GMT
etag: "63f8cd25-23a"
expires: Sun, 09 Jul 2023 12:18:31 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.poste.it/icone-cta/chiamaci.png | 13.107.229.26 | 200 OK | 677 B |
URL GET HTTP/2www.poste.it/icone-cta/chiamaci.png IP13.107.229.26:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
CertificateIssuerGlobalSign nv-sa Subjectwww.poste.it Fingerprint2F:FA:CF:BF:0A:E8:2C:CE:BF:2E:4D:41:21:64:9F:14:0B:D0:95:10 ValidityTue, 28 Mar 2023 10:46:03 GMT - Sun, 28 Apr 2024 10:46:02 GMT
File typePNG image data, 25 x 24, 8-bit/color RGBA, interlaced\012- data Hash793af7b683aa2f83ef13f04b46290a7e e43f553eb001023d3c05ee896943a9a58e425ccb 4107c25521da5ee37c5d24e380378112c466e5e3d26925e2e296c7783de26f53
GET /icone-cta/chiamaci.png HTTP/1.1
Host: www.poste.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://itpost-new.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: max-age=3600,public
pragma: public
content-length: 677
content-type: image/png
expires: Fri, 09 Jun 2023 13:18:31 GMT
last-modified: Fri, 20 May 2022 05:04:01 GMT
accept-ranges: bytes
etag: "62872141-2a5"
x-cache: CONFIG_NOCACHE
x-azure-ref: 0lxiDZAAAAADKd4tjw07QQ4BWWbXVgrN+U1ZHMjBFREdFMDUxNABiZWE0YWQ2MS1kNWI2LTRmYmYtOWYyMC04NzJlNzI1N2U1NmE=
date: Fri, 09 Jun 2023 12:18:31 GMT
X-Firefox-Spdy: h2
|
|
| itpost-new.top/static/picture/ico-impostazioni.png | 198.23.174.151 | 200 OK | 791 B |
URL GET HTTP/2itpost-new.top/static/picture/ico-impostazioni.png IP198.23.174.151:443 ASN#36352 AS-COLOCROSSING
CertificateIssuerLet's Encrypt Subjectitpost-new.top Fingerprint90:5A:8C:98:ED:2F:00:61:65:35:BC:7F:21:5E:62:14:5C:A7:53:5D ValidityWed, 07 Jun 2023 12:44:24 GMT - Tue, 05 Sep 2023 12:44:23 GMT
File typePNG image data, 25 x 25, 8-bit/color RGBA, interlaced\012- data Hash59a5a3b62b5a5e74162980eae78ac5c4 559c4f35f6b75ad7ea84d11a69d09aa8e591a7a4 5fd4b883fac349dacc12da097e3e912583b94248f9cfe95308df49f60264e1aa
| Analyzer | Verdict | Alert |
|---|
| openphish | Poste Italiane S.p.A | |
GET /static/picture/ico-impostazioni.png HTTP/1.1
Host: itpost-new.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://itpost-new.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 09 Jun 2023 12:18:31 GMT
content-type: image/png
content-length: 791
last-modified: Fri, 24 Feb 2023 14:43:49 GMT
etag: "63f8cd25-317"
expires: Sun, 09 Jul 2023 12:18:31 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| itpost-new.top/static/picture/ico-logout.png | 198.23.174.151 | 200 OK | 986 B |
URL GET HTTP/2itpost-new.top/static/picture/ico-logout.png IP198.23.174.151:443 ASN#36352 AS-COLOCROSSING
CertificateIssuerLet's Encrypt Subjectitpost-new.top Fingerprint90:5A:8C:98:ED:2F:00:61:65:35:BC:7F:21:5E:62:14:5C:A7:53:5D ValidityWed, 07 Jun 2023 12:44:24 GMT - Tue, 05 Sep 2023 12:44:23 GMT
File typePNG image data, 48 x 48, 8-bit/color RGBA, interlaced\012- data Hash9050cc1eeb416ad58527e231474ce70d d4834d8748292d14c4d765f747fea0cb5445ab14 bf92f8df67ee828cfed80a2b244dfbc15e9c0beecb467da3f0ea66ca6d2dd2c8
| Analyzer | Verdict | Alert |
|---|
| openphish | Poste Italiane S.p.A | |
GET /static/picture/ico-logout.png HTTP/1.1
Host: itpost-new.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://itpost-new.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 09 Jun 2023 12:18:31 GMT
content-type: image/png
content-length: 986
last-modified: Fri, 24 Feb 2023 14:43:49 GMT
etag: "63f8cd25-3da"
expires: Sun, 09 Jul 2023 12:18:31 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| itpost-new.top/static/picture/vieni-in-poste-cerca-up.png | 198.23.174.151 | 200 OK | 669 B |
URL GET HTTP/2itpost-new.top/static/picture/vieni-in-poste-cerca-up.png IP198.23.174.151:443 ASN#36352 AS-COLOCROSSING
CertificateIssuerLet's Encrypt Subjectitpost-new.top Fingerprint90:5A:8C:98:ED:2F:00:61:65:35:BC:7F:21:5E:62:14:5C:A7:53:5D ValidityWed, 07 Jun 2023 12:44:24 GMT - Tue, 05 Sep 2023 12:44:23 GMT
File typePNG image data, 25 x 24, 8-bit/color RGBA, interlaced\012- data Hashc2183ee46d94411a5660f4b8451e2aa1 c85784401fb87e8e7a6a5e07240b23ce5b6ddeeb f97dc8796d6188136c4f09f80b425be64a2eda69fb9401bf3adf5f383dc34f10
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Poste Italiane | | openphish | Poste Italiane S.p.A | |
GET /static/picture/vieni-in-poste-cerca-up.png HTTP/1.1
Host: itpost-new.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://itpost-new.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 09 Jun 2023 12:18:31 GMT
content-type: image/png
content-length: 669
last-modified: Fri, 24 Feb 2023 14:43:50 GMT
etag: "63f8cd26-29d"
expires: Sun, 09 Jul 2023 12:18:31 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.poste.it/icone-cta/vieni-in-poste-cerca-up.png | 13.107.229.26 | 200 OK | 669 B |
URL GET HTTP/2www.poste.it/icone-cta/vieni-in-poste-cerca-up.png IP13.107.229.26:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
CertificateIssuerGlobalSign nv-sa Subjectwww.poste.it Fingerprint2F:FA:CF:BF:0A:E8:2C:CE:BF:2E:4D:41:21:64:9F:14:0B:D0:95:10 ValidityTue, 28 Mar 2023 10:46:03 GMT - Sun, 28 Apr 2024 10:46:02 GMT
File typePNG image data, 25 x 24, 8-bit/color RGBA, interlaced\012- data Hashc2183ee46d94411a5660f4b8451e2aa1 c85784401fb87e8e7a6a5e07240b23ce5b6ddeeb f97dc8796d6188136c4f09f80b425be64a2eda69fb9401bf3adf5f383dc34f10
GET /icone-cta/vieni-in-poste-cerca-up.png HTTP/1.1
Host: www.poste.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://itpost-new.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cache-control: max-age=3600,public
pragma: public
content-length: 669
content-type: image/png
expires: Fri, 09 Jun 2023 13:18:31 GMT
last-modified: Fri, 10 Feb 2023 17:48:07 GMT
accept-ranges: bytes
etag: "63e68357-29d"
x-cache: CONFIG_NOCACHE
x-azure-ref: 0lxiDZAAAAACGR6UqXP0cQYbevAfnOWVoU1ZHMjBFREdFMDUxNABiZWE0YWQ2MS1kNWI2LTRmYmYtOWYyMC04NzJlNzI1N2U1NmE=
date: Fri, 09 Jun 2023 12:18:31 GMT
X-Firefox-Spdy: h2
|
|
| www.poste.it/icone-cta/bollettini-premarcati.png | 13.107.229.26 | 200 OK | 435 B |
URL GET HTTP/2www.poste.it/icone-cta/bollettini-premarcati.png IP13.107.229.26:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
CertificateIssuerGlobalSign nv-sa Subjectwww.poste.it Fingerprint2F:FA:CF:BF:0A:E8:2C:CE:BF:2E:4D:41:21:64:9F:14:0B:D0:95:10 ValidityTue, 28 Mar 2023 10:46:03 GMT - Sun, 28 Apr 2024 10:46:02 GMT
File typePNG image data, 25 x 25, 8-bit/color RGBA, interlaced\012- data Hashe44cb1584c01674fea4cf893f9710a42 d273d38094d3b17eeca4d2216c874de6efdb2112 c79d2ef02ac4a3bbbbf248f8171b9704d21fc5467810a967a067072f259a9fb5
GET /icone-cta/bollettini-premarcati.png HTTP/1.1
Host: www.poste.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://itpost-new.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: max-age=3600,public
pragma: public
content-length: 435
content-type: image/png
expires: Fri, 09 Jun 2023 13:18:31 GMT
last-modified: Wed, 20 Oct 2021 13:59:23 GMT
accept-ranges: bytes
etag: "617020bb-1b3"
x-cache: CONFIG_NOCACHE
x-azure-ref: 0lxiDZAAAAADHFYA4kt8/Rpl0G9yX7BX7U1ZHMjBFREdFMDUxNABiZWE0YWQ2MS1kNWI2LTRmYmYtOWYyMC04NzJlNzI1N2U1NmE=
date: Fri, 09 Jun 2023 12:18:31 GMT
X-Firefox-Spdy: h2
|
|
| www.poste.it/icone-cta/scrivici.png | 13.107.229.26 | 200 OK | 630 B |
URL GET HTTP/2www.poste.it/icone-cta/scrivici.png IP13.107.229.26:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
CertificateIssuerGlobalSign nv-sa Subjectwww.poste.it Fingerprint2F:FA:CF:BF:0A:E8:2C:CE:BF:2E:4D:41:21:64:9F:14:0B:D0:95:10 ValidityTue, 28 Mar 2023 10:46:03 GMT - Sun, 28 Apr 2024 10:46:02 GMT
File typePNG image data, 25 x 24, 8-bit/color RGBA, interlaced\012- data Hashe08dd2c986ffe801621f2d483838dca8 555a41c4815de5a71bda66ab8698743c60c3cd1d 9ff77f4a96667c4c35e7572f597b733d13f34396c8d5d4c9fac1d61da11c35f0
GET /icone-cta/scrivici.png HTTP/1.1
Host: www.poste.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://itpost-new.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: max-age=3600,public
pragma: public
content-length: 630
content-type: image/png
expires: Fri, 09 Jun 2023 13:18:31 GMT
last-modified: Fri, 20 May 2022 05:10:01 GMT
accept-ranges: bytes
etag: "628722a9-276"
x-cache: CONFIG_NOCACHE
x-azure-ref: 0lxiDZAAAAACLCR8DHrsTSbZoQF2XbBDBU1ZHMjBFREdFMDUxNABiZWE0YWQ2MS1kNWI2LTRmYmYtOWYyMC04NzJlNzI1N2U1NmE=
date: Fri, 09 Jun 2023 12:18:31 GMT
X-Firefox-Spdy: h2
|
|
| itpost-new.top/static/picture/logo-poste-italiane-medium.png | 198.23.174.151 | 200 OK | 5.2 kB |
URL GET HTTP/2itpost-new.top/static/picture/logo-poste-italiane-medium.png IP198.23.174.151:443 ASN#36352 AS-COLOCROSSING
CertificateIssuerLet's Encrypt Subjectitpost-new.top Fingerprint90:5A:8C:98:ED:2F:00:61:65:35:BC:7F:21:5E:62:14:5C:A7:53:5D ValidityWed, 07 Jun 2023 12:44:24 GMT - Tue, 05 Sep 2023 12:44:23 GMT
File typePNG image data, 128 x 16, 8-bit/color RGBA, non-interlaced\012- data Hash9cd2e2f9fc86184757f36a95393cd362 24917b0e502b63c8c79d99f02d4de6a47653cbd1 d26cdfa4e4c99bcd4d99047beff09a62f8e0c955654b7a4968acf1ebdc293cb8
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Poste Italiane | | openphish | Poste Italiane S.p.A | |
GET /static/picture/logo-poste-italiane-medium.png HTTP/1.1
Host: itpost-new.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://itpost-new.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 09 Jun 2023 12:18:31 GMT
content-type: image/png
content-length: 5213
last-modified: Fri, 24 Feb 2023 14:43:49 GMT
etag: "63f8cd25-145d"
expires: Sun, 09 Jul 2023 12:18:31 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| itpost-new.top/static/picture/logo-tgposte-menu.png | 198.23.174.151 | 200 OK | 2.6 kB |
URL GET HTTP/2itpost-new.top/static/picture/logo-tgposte-menu.png IP198.23.174.151:443 ASN#36352 AS-COLOCROSSING
CertificateIssuerLet's Encrypt Subjectitpost-new.top Fingerprint90:5A:8C:98:ED:2F:00:61:65:35:BC:7F:21:5E:62:14:5C:A7:53:5D ValidityWed, 07 Jun 2023 12:44:24 GMT - Tue, 05 Sep 2023 12:44:23 GMT
File typePNG image data, 201 x 71, 8-bit/color RGBA, non-interlaced\012- data Hash4bd97d597bea8ca05fd582b413a5ef15 6b8ba7f5393079e2de7c1b6df34c8bd76d6c80b6 fc70eea596a55599ef338b69a16e62290ade7e1f9917fb71a73fe70197a0386c
| Analyzer | Verdict | Alert |
|---|
| openphish | Poste Italiane S.p.A | |
GET /static/picture/logo-tgposte-menu.png HTTP/1.1
Host: itpost-new.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://itpost-new.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 09 Jun 2023 12:18:31 GMT
content-type: image/png
content-length: 2575
last-modified: Fri, 24 Feb 2023 14:43:49 GMT
etag: "63f8cd25-a0f"
expires: Sun, 09 Jul 2023 12:18:31 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| itpost-new.top/static/picture/spedisci-1.png | 198.23.174.151 | 200 OK | 744 B |
URL GET HTTP/2itpost-new.top/static/picture/spedisci-1.png IP198.23.174.151:443 ASN#36352 AS-COLOCROSSING
CertificateIssuerLet's Encrypt Subjectitpost-new.top Fingerprint90:5A:8C:98:ED:2F:00:61:65:35:BC:7F:21:5E:62:14:5C:A7:53:5D ValidityWed, 07 Jun 2023 12:44:24 GMT - Tue, 05 Sep 2023 12:44:23 GMT
File typePNG image data, 25 x 25, 8-bit/color RGBA, interlaced\012- data Hash2593397c018aa29915b54d02614b50ed ea24086ceb8a0c1e86ee2da30eb6d0073ff9bd02 47d9d32819b657cf37c2a2c4b292ddc0c5a8d5d80a4d9045bcb50643bce56628
| Analyzer | Verdict | Alert |
|---|
| openphish | Poste Italiane S.p.A | |
GET /static/picture/spedisci-1.png HTTP/1.1
Host: itpost-new.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://itpost-new.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 09 Jun 2023 12:18:31 GMT
content-type: image/png
content-length: 744
last-modified: Fri, 24 Feb 2023 14:43:49 GMT
etag: "63f8cd25-2e8"
expires: Sun, 09 Jul 2023 12:18:31 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| itpost-new.top/static/picture/francobollo-facile.png | 198.23.174.151 | 200 OK | 4.3 kB |
URL GET HTTP/2itpost-new.top/static/picture/francobollo-facile.png IP198.23.174.151:443 ASN#36352 AS-COLOCROSSING
CertificateIssuerLet's Encrypt Subjectitpost-new.top Fingerprint90:5A:8C:98:ED:2F:00:61:65:35:BC:7F:21:5E:62:14:5C:A7:53:5D ValidityWed, 07 Jun 2023 12:44:24 GMT - Tue, 05 Sep 2023 12:44:23 GMT
File typePNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced\012- data Hash55dc66d4a3e85b97a4a98a53bc6ee761 727f304f3a05a0af0cd9713b8ab07618a1c86e43 417336d21d3fc06ac38c030115e2380774117e0a7b3eb503890e9ef3556c5c03
| Analyzer | Verdict | Alert |
|---|
| openphish | Poste Italiane S.p.A | |
GET /static/picture/francobollo-facile.png HTTP/1.1
Host: itpost-new.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://itpost-new.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 09 Jun 2023 12:18:31 GMT
content-type: image/png
content-length: 4295
last-modified: Fri, 24 Feb 2023 14:43:49 GMT
etag: "63f8cd25-10c7"
expires: Sun, 09 Jul 2023 12:18:31 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| itpost-new.top/static/picture/spedisci-online-spedisci.png | 198.23.174.151 | 200 OK | 665 B |
URL GET HTTP/2itpost-new.top/static/picture/spedisci-online-spedisci.png IP198.23.174.151:443 ASN#36352 AS-COLOCROSSING
CertificateIssuerLet's Encrypt Subjectitpost-new.top Fingerprint90:5A:8C:98:ED:2F:00:61:65:35:BC:7F:21:5E:62:14:5C:A7:53:5D ValidityWed, 07 Jun 2023 12:44:24 GMT - Tue, 05 Sep 2023 12:44:23 GMT
File typePNG image data, 25 x 25, 8-bit/color RGBA, interlaced\012- data Hash37428834e315db93950f8b81768d9ca3 78a178199b36c10cacdff0f924fda8f99b619564 336c43005c5fc8672fcf55f68f0d77e03028e27145997379cf0a9bf93a09f113
| Analyzer | Verdict | Alert |
|---|
| openphish | Poste Italiane S.p.A | |
GET /static/picture/spedisci-online-spedisci.png HTTP/1.1
Host: itpost-new.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://itpost-new.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 09 Jun 2023 12:18:31 GMT
content-type: image/png
content-length: 665
last-modified: Fri, 24 Feb 2023 14:43:49 GMT
etag: "63f8cd25-299"
expires: Sun, 09 Jul 2023 12:18:31 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| itpost-new.top/static/picture/ico-prenota-ritiri-1x.png | 198.23.174.151 | 200 OK | 503 B |
URL GET HTTP/2itpost-new.top/static/picture/ico-prenota-ritiri-1x.png IP198.23.174.151:443 ASN#36352 AS-COLOCROSSING
CertificateIssuerLet's Encrypt Subjectitpost-new.top Fingerprint90:5A:8C:98:ED:2F:00:61:65:35:BC:7F:21:5E:62:14:5C:A7:53:5D ValidityWed, 07 Jun 2023 12:44:24 GMT - Tue, 05 Sep 2023 12:44:23 GMT
File typePNG image data, 25 x 25, 8-bit/color RGBA, non-interlaced\012- data Hash02b31294b04d61809f5b1a5a273beddd 8df92e298f73116f39612f7b213926ee986a7e56 6305e4886994e0ee46bc4906a81a4640cbce5b110cf21f5c89115448ba04b8fb
| Analyzer | Verdict | Alert |
|---|
| openphish | Poste Italiane S.p.A | |
GET /static/picture/ico-prenota-ritiri-1x.png HTTP/1.1
Host: itpost-new.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://itpost-new.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 09 Jun 2023 12:18:31 GMT
content-type: image/png
content-length: 503
last-modified: Fri, 24 Feb 2023 14:43:49 GMT
etag: "63f8cd25-1f7"
expires: Sun, 09 Jul 2023 12:18:31 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| itpost-new.top/static/picture/ico-calcola-tempi-consegna-1x.png | 198.23.174.151 | 200 OK | 468 B |
URL GET HTTP/2itpost-new.top/static/picture/ico-calcola-tempi-consegna-1x.png IP198.23.174.151:443 ASN#36352 AS-COLOCROSSING
CertificateIssuerLet's Encrypt Subjectitpost-new.top Fingerprint90:5A:8C:98:ED:2F:00:61:65:35:BC:7F:21:5E:62:14:5C:A7:53:5D ValidityWed, 07 Jun 2023 12:44:24 GMT - Tue, 05 Sep 2023 12:44:23 GMT
File typePNG image data, 25 x 25, 8-bit/color RGBA, non-interlaced\012- data Hashc07a5e64bde6f3f467ac7cec8c62d4cb 507dadda1b5aea26ac36d5f60e4c7ffc0e5e7d22 9490bc25271cfb06e9f8277890db66867505dc763a1bc351e7c3e7ff5f413213
| Analyzer | Verdict | Alert |
|---|
| openphish | Poste Italiane S.p.A | |
GET /static/picture/ico-calcola-tempi-consegna-1x.png HTTP/1.1
Host: itpost-new.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://itpost-new.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 09 Jun 2023 12:18:31 GMT
content-type: image/png
content-length: 468
last-modified: Fri, 24 Feb 2023 14:43:49 GMT
etag: "63f8cd25-1d4"
expires: Sun, 09 Jul 2023 12:18:31 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| itpost-new.top/static/picture/ritiro-digitale.png | 198.23.174.151 | 200 OK | 4.0 kB |
URL GET HTTP/2itpost-new.top/static/picture/ritiro-digitale.png IP198.23.174.151:443 ASN#36352 AS-COLOCROSSING
CertificateIssuerLet's Encrypt Subjectitpost-new.top Fingerprint90:5A:8C:98:ED:2F:00:61:65:35:BC:7F:21:5E:62:14:5C:A7:53:5D ValidityWed, 07 Jun 2023 12:44:24 GMT - Tue, 05 Sep 2023 12:44:23 GMT
File typePNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced\012- data Hash444fb9dc43857ce6064aeabb696351e3 03b39fd19d3a67199b901e98a14e7e768f47e459 8667a5c6e5946689a4a18dbfcec32cd8b6e9a68a5efa7d2e2d0dfb619086eec1
| Analyzer | Verdict | Alert |
|---|
| openphish | Poste Italiane S.p.A | |
GET /static/picture/ritiro-digitale.png HTTP/1.1
Host: itpost-new.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://itpost-new.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 09 Jun 2023 12:18:31 GMT
content-type: image/png
content-length: 3995
last-modified: Fri, 24 Feb 2023 14:43:49 GMT
etag: "63f8cd25-f9b"
expires: Sun, 09 Jul 2023 12:18:31 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| itpost-new.top/static/picture/firma-digitale-remota-1x.png | 198.23.174.151 | 200 OK | 641 B |
URL GET HTTP/2itpost-new.top/static/picture/firma-digitale-remota-1x.png IP198.23.174.151:443 ASN#36352 AS-COLOCROSSING
CertificateIssuerLet's Encrypt Subjectitpost-new.top Fingerprint90:5A:8C:98:ED:2F:00:61:65:35:BC:7F:21:5E:62:14:5C:A7:53:5D ValidityWed, 07 Jun 2023 12:44:24 GMT - Tue, 05 Sep 2023 12:44:23 GMT
File typePNG image data, 25 x 25, 8-bit/color RGBA, non-interlaced\012- data Hasha5cf69c42804db8d7181cb93ad0d5948 2a97f544d510b46676cb9816188d3ac3eb6d982e e72b8a1986b7315af67edfb2d22ebad424ffce4696b5cda0ec0e46bbcc88e48f
| Analyzer | Verdict | Alert |
|---|
| openphish | Poste Italiane S.p.A | |
GET /static/picture/firma-digitale-remota-1x.png HTTP/1.1
Host: itpost-new.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://itpost-new.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 09 Jun 2023 12:18:31 GMT
content-type: image/png
content-length: 641
last-modified: Fri, 24 Feb 2023 14:43:49 GMT
etag: "63f8cd25-281"
expires: Sun, 09 Jul 2023 12:18:31 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| itpost-new.top/static/picture/postecert.png | 198.23.174.151 | 200 OK | 610 B |
URL GET HTTP/2itpost-new.top/static/picture/postecert.png IP198.23.174.151:443 ASN#36352 AS-COLOCROSSING
CertificateIssuerLet's Encrypt Subjectitpost-new.top Fingerprint90:5A:8C:98:ED:2F:00:61:65:35:BC:7F:21:5E:62:14:5C:A7:53:5D ValidityWed, 07 Jun 2023 12:44:24 GMT - Tue, 05 Sep 2023 12:44:23 GMT
File typePNG image data, 25 x 25, 8-bit/color RGBA, interlaced\012- data Hash57794b7f0e328f4cff68a783897a3d6b 734e63f4f7370e1c67e30dd8656b2839ef75e54d 0ec1a9d1d177e640be4d0b6ba31bb11ecc542101c999803bab557276e54e32e0
| Analyzer | Verdict | Alert |
|---|
| openphish | Poste Italiane S.p.A | |
GET /static/picture/postecert.png HTTP/1.1
Host: itpost-new.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://itpost-new.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 09 Jun 2023 12:18:31 GMT
content-type: image/png
content-length: 610
last-modified: Fri, 24 Feb 2023 14:43:49 GMT
etag: "63f8cd25-262"
expires: Sun, 09 Jul 2023 12:18:31 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| itpost-new.top/static/picture/acquista-francobolli.png | 198.23.174.151 | 200 OK | 4.3 kB |
URL GET HTTP/2itpost-new.top/static/picture/acquista-francobolli.png IP198.23.174.151:443 ASN#36352 AS-COLOCROSSING
CertificateIssuerLet's Encrypt Subjectitpost-new.top Fingerprint90:5A:8C:98:ED:2F:00:61:65:35:BC:7F:21:5E:62:14:5C:A7:53:5D ValidityWed, 07 Jun 2023 12:44:24 GMT - Tue, 05 Sep 2023 12:44:23 GMT
File typePNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced\012- data Hash58331797d625debcb8b7b3fce7b5acdc f81ab0bcc634ea3f388d8d56f18a71bde1825b3c b8bbf6eef57eeed90a7cb0aa141f8cedf057dd295dbe03a0db82f10e28e2e7ff
| Analyzer | Verdict | Alert |
|---|
| openphish | Poste Italiane S.p.A | |
GET /static/picture/acquista-francobolli.png HTTP/1.1
Host: itpost-new.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://itpost-new.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 09 Jun 2023 12:18:31 GMT
content-type: image/png
content-length: 4288
last-modified: Fri, 24 Feb 2023 14:43:49 GMT
etag: "63f8cd25-10c0"
expires: Sun, 09 Jul 2023 12:18:31 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| itpost-new.top/static/picture/cerca-spedizione.png | 198.23.174.151 | 200 OK | 472 B |
URL GET HTTP/2itpost-new.top/static/picture/cerca-spedizione.png IP198.23.174.151:443 ASN#36352 AS-COLOCROSSING
CertificateIssuerLet's Encrypt Subjectitpost-new.top Fingerprint90:5A:8C:98:ED:2F:00:61:65:35:BC:7F:21:5E:62:14:5C:A7:53:5D ValidityWed, 07 Jun 2023 12:44:24 GMT - Tue, 05 Sep 2023 12:44:23 GMT
File typePNG image data, 25 x 25, 8-bit/color RGBA, interlaced\012- data Hash861cab1ebf51f6b5efbb344e6bdacd6e 96e291dc5d6b8b46e49afc4e7226577ccab76b89 6604b449553e51c6adcda0a64f2032f87b75ccec7342135987061a9e1a0b2bb2
| Analyzer | Verdict | Alert |
|---|
| openphish | Poste Italiane S.p.A | |
GET /static/picture/cerca-spedizione.png HTTP/1.1
Host: itpost-new.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://itpost-new.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 09 Jun 2023 12:18:31 GMT
content-type: image/png
content-length: 472
last-modified: Fri, 24 Feb 2023 14:43:49 GMT
etag: "63f8cd25-1d8"
expires: Sun, 09 Jul 2023 12:18:31 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| itpost-new.top/static/picture/richiesta-informazioni-bollette.png | 198.23.174.151 | 200 OK | 371 B |
URL GET HTTP/2itpost-new.top/static/picture/richiesta-informazioni-bollette.png IP198.23.174.151:443 ASN#36352 AS-COLOCROSSING
CertificateIssuerLet's Encrypt Subjectitpost-new.top Fingerprint90:5A:8C:98:ED:2F:00:61:65:35:BC:7F:21:5E:62:14:5C:A7:53:5D ValidityWed, 07 Jun 2023 12:44:24 GMT - Tue, 05 Sep 2023 12:44:23 GMT
File typePNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced\012- data Hashee3e12bde9cfd066c9d2d8382151cb0d 0d068868c8542d143d7d9a788d7b0a15833b3c06 5b751e14bc506f256d7bb9ff9babb9f02cbfd55c04f7dfd03197e3fe7a0c7869
| Analyzer | Verdict | Alert |
|---|
| openphish | Poste Italiane S.p.A | |
GET /static/picture/richiesta-informazioni-bollette.png HTTP/1.1
Host: itpost-new.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://itpost-new.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 09 Jun 2023 12:18:31 GMT
content-type: image/png
content-length: 371
last-modified: Fri, 24 Feb 2023 14:43:49 GMT
etag: "63f8cd25-173"
expires: Sun, 09 Jul 2023 12:18:31 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| itpost-new.top/static/picture/e-filatelia.png | 198.23.174.151 | 200 OK | 475 B |
URL GET HTTP/2itpost-new.top/static/picture/e-filatelia.png IP198.23.174.151:443 ASN#36352 AS-COLOCROSSING
CertificateIssuerLet's Encrypt Subjectitpost-new.top Fingerprint90:5A:8C:98:ED:2F:00:61:65:35:BC:7F:21:5E:62:14:5C:A7:53:5D ValidityWed, 07 Jun 2023 12:44:24 GMT - Tue, 05 Sep 2023 12:44:23 GMT
File typePNG image data, 25 x 25, 8-bit/color RGBA, interlaced\012- data Hash7b1ff10974764b6faae1fbc64190f831 af19793248a1cfac2d38edfafda1f52dc2713a3c b56cc1451dd499f212ff3f3472c2b21125a4453bd7e638ec55920ad0c390e335
| Analyzer | Verdict | Alert |
|---|
| openphish | Poste Italiane S.p.A | |
GET /static/picture/e-filatelia.png HTTP/1.1
Host: itpost-new.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://itpost-new.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 09 Jun 2023 12:18:31 GMT
content-type: image/png
content-length: 475
last-modified: Fri, 24 Feb 2023 14:43:50 GMT
etag: "63f8cd26-1db"
expires: Sun, 09 Jul 2023 12:18:31 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| itpost-new.top/static/picture/chiamaci.png | 198.23.174.151 | 200 OK | 677 B |
URL GET HTTP/2itpost-new.top/static/picture/chiamaci.png IP198.23.174.151:443 ASN#36352 AS-COLOCROSSING
CertificateIssuerLet's Encrypt Subjectitpost-new.top Fingerprint90:5A:8C:98:ED:2F:00:61:65:35:BC:7F:21:5E:62:14:5C:A7:53:5D ValidityWed, 07 Jun 2023 12:44:24 GMT - Tue, 05 Sep 2023 12:44:23 GMT
File typePNG image data, 25 x 24, 8-bit/color RGBA, interlaced\012- data Hash793af7b683aa2f83ef13f04b46290a7e e43f553eb001023d3c05ee896943a9a58e425ccb 4107c25521da5ee37c5d24e380378112c466e5e3d26925e2e296c7783de26f53
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Poste Italiane | | openphish | Poste Italiane S.p.A | |
GET /static/picture/chiamaci.png HTTP/1.1
Host: itpost-new.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://itpost-new.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 09 Jun 2023 12:18:31 GMT
content-type: image/png
content-length: 677
last-modified: Fri, 24 Feb 2023 14:43:49 GMT
etag: "63f8cd25-2a5"
expires: Sun, 09 Jul 2023 12:18:31 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| itpost-new.top/static/picture/scrivici.png | 198.23.174.151 | 200 OK | 630 B |
URL GET HTTP/2itpost-new.top/static/picture/scrivici.png IP198.23.174.151:443 ASN#36352 AS-COLOCROSSING
CertificateIssuerLet's Encrypt Subjectitpost-new.top Fingerprint90:5A:8C:98:ED:2F:00:61:65:35:BC:7F:21:5E:62:14:5C:A7:53:5D ValidityWed, 07 Jun 2023 12:44:24 GMT - Tue, 05 Sep 2023 12:44:23 GMT
File typePNG image data, 25 x 24, 8-bit/color RGBA, interlaced\012- data Hashe08dd2c986ffe801621f2d483838dca8 555a41c4815de5a71bda66ab8698743c60c3cd1d 9ff77f4a96667c4c35e7572f597b733d13f34396c8d5d4c9fac1d61da11c35f0
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Poste Italiane | | openphish | Poste Italiane S.p.A | |
GET /static/picture/scrivici.png HTTP/1.1
Host: itpost-new.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://itpost-new.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 09 Jun 2023 12:18:31 GMT
content-type: image/png
content-length: 630
last-modified: Fri, 24 Feb 2023 14:43:50 GMT
etag: "63f8cd26-276"
expires: Sun, 09 Jul 2023 12:18:31 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| itpost-new.top/static/picture/assistenza-domande-frequenti.png | 198.23.174.151 | 200 OK | 667 B |
URL GET HTTP/2itpost-new.top/static/picture/assistenza-domande-frequenti.png IP198.23.174.151:443 ASN#36352 AS-COLOCROSSING
CertificateIssuerLet's Encrypt Subjectitpost-new.top Fingerprint90:5A:8C:98:ED:2F:00:61:65:35:BC:7F:21:5E:62:14:5C:A7:53:5D ValidityWed, 07 Jun 2023 12:44:24 GMT - Tue, 05 Sep 2023 12:44:23 GMT
File typePNG image data, 25 x 24, 8-bit/color RGBA, interlaced\012- data Hash8f2852b7bbd38844fca34aa5dcfc888e d1de7c07d00e7194e81b8899b091487254dbbabc e9b0fe003419b3f44b6f5b2d1ca885b2db6681b3916a950a839b2d067d7c93b5
| Analyzer | Verdict | Alert |
|---|
| openphish | Poste Italiane S.p.A | |
GET /static/picture/assistenza-domande-frequenti.png HTTP/1.1
Host: itpost-new.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://itpost-new.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 09 Jun 2023 12:18:31 GMT
content-type: image/png
content-length: 667
last-modified: Fri, 24 Feb 2023 14:43:50 GMT
etag: "63f8cd26-29b"
expires: Sun, 09 Jul 2023 12:18:31 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| itpost-new.top/static/picture/gestire-il-denaro-1.png | 198.23.174.151 | 200 OK | 493 B |
URL GET HTTP/2itpost-new.top/static/picture/gestire-il-denaro-1.png IP198.23.174.151:443 ASN#36352 AS-COLOCROSSING
CertificateIssuerLet's Encrypt Subjectitpost-new.top Fingerprint90:5A:8C:98:ED:2F:00:61:65:35:BC:7F:21:5E:62:14:5C:A7:53:5D ValidityWed, 07 Jun 2023 12:44:24 GMT - Tue, 05 Sep 2023 12:44:23 GMT
File typePNG image data, 25 x 25, 8-bit/color RGBA, interlaced\012- data Hash9e37819d445476ac61cada9e080d908b 4f45590b6acb34ff1b2cff33d71de520bef3b181 8c01b95208c7dd58b080f141386e537ffe96ec1385327243250ed1ace7502856
| Analyzer | Verdict | Alert |
|---|
| openphish | Poste Italiane S.p.A | |
GET /static/picture/gestire-il-denaro-1.png HTTP/1.1
Host: itpost-new.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://itpost-new.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 09 Jun 2023 12:18:31 GMT
content-type: image/png
content-length: 493
last-modified: Fri, 24 Feb 2023 14:43:50 GMT
etag: "63f8cd26-1ed"
expires: Sun, 09 Jul 2023 12:18:31 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| itpost-new.top/static/picture/paga-e-trasferisci-1.png | 198.23.174.151 | 200 OK | 788 B |
URL GET HTTP/2itpost-new.top/static/picture/paga-e-trasferisci-1.png IP198.23.174.151:443 ASN#36352 AS-COLOCROSSING
CertificateIssuerLet's Encrypt Subjectitpost-new.top Fingerprint90:5A:8C:98:ED:2F:00:61:65:35:BC:7F:21:5E:62:14:5C:A7:53:5D ValidityWed, 07 Jun 2023 12:44:24 GMT - Tue, 05 Sep 2023 12:44:23 GMT
File typePNG image data, 25 x 25, 8-bit/color RGBA, interlaced\012- data Hashb2922ec8c6de44a2574a9ed6129063bb a4d66f37da6041530a3e70d97e61674bc6c1d83e 031d1395047c8e3e12650334571e1dfc2dd1481817f5f2d9b98d61b77cbbaaf6
| Analyzer | Verdict | Alert |
|---|
| openphish | Poste Italiane S.p.A | |
GET /static/picture/paga-e-trasferisci-1.png HTTP/1.1
Host: itpost-new.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://itpost-new.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 09 Jun 2023 12:18:31 GMT
content-type: image/png
content-length: 788
last-modified: Fri, 24 Feb 2023 14:43:50 GMT
etag: "63f8cd26-314"
expires: Sun, 09 Jul 2023 12:18:31 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| itpost-new.top/static/picture/finanziare-progetti-1.png | 198.23.174.151 | 200 OK | 777 B |
URL GET HTTP/2itpost-new.top/static/picture/finanziare-progetti-1.png IP198.23.174.151:443 ASN#36352 AS-COLOCROSSING
CertificateIssuerLet's Encrypt Subjectitpost-new.top Fingerprint90:5A:8C:98:ED:2F:00:61:65:35:BC:7F:21:5E:62:14:5C:A7:53:5D ValidityWed, 07 Jun 2023 12:44:24 GMT - Tue, 05 Sep 2023 12:44:23 GMT
File typePNG image data, 25 x 25, 8-bit/color RGBA, interlaced\012- data Hash094420a8a129a6e2aa77f4d80f6305ca 615a6cb87ed5716424902e7f6475fad1adfc4901 5cc8996d6ad9d8099c51ea4ce08b819a49a93852cd70f487e92bd64a97bb42d7
| Analyzer | Verdict | Alert |
|---|
| openphish | Poste Italiane S.p.A | |
GET /static/picture/finanziare-progetti-1.png HTTP/1.1
Host: itpost-new.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://itpost-new.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 09 Jun 2023 12:18:31 GMT
content-type: image/png
content-length: 777
last-modified: Fri, 24 Feb 2023 14:43:50 GMT
etag: "63f8cd26-309"
expires: Sun, 09 Jul 2023 12:18:31 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| itpost-new.top/static/picture/accedi-bp.png | 198.23.174.151 | 200 OK | 4.2 kB |
URL GET HTTP/2itpost-new.top/static/picture/accedi-bp.png IP198.23.174.151:443 ASN#36352 AS-COLOCROSSING
CertificateIssuerLet's Encrypt Subjectitpost-new.top Fingerprint90:5A:8C:98:ED:2F:00:61:65:35:BC:7F:21:5E:62:14:5C:A7:53:5D ValidityWed, 07 Jun 2023 12:44:24 GMT - Tue, 05 Sep 2023 12:44:23 GMT
File typePNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced\012- data Hash67c3a0735b93f4ab06381511e5531180 3a23b81615f5a5a740b3cd9654d3c41d93a5f9e8 a7a7260ca3c7edf8fbfc87147ae725db68e24143b23ab91596e22103781dd840
| Analyzer | Verdict | Alert |
|---|
| openphish | Poste Italiane S.p.A | |
GET /static/picture/accedi-bp.png HTTP/1.1
Host: itpost-new.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://itpost-new.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 09 Jun 2023 12:18:31 GMT
content-type: image/png
content-length: 4208
last-modified: Fri, 24 Feb 2023 14:43:50 GMT
etag: "63f8cd26-1070"
expires: Sun, 09 Jul 2023 12:18:31 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| itpost-new.top/static/picture/accedi-bp-click.png | 198.23.174.151 | 200 OK | 4.4 kB |
URL GET HTTP/2itpost-new.top/static/picture/accedi-bp-click.png IP198.23.174.151:443 ASN#36352 AS-COLOCROSSING
CertificateIssuerLet's Encrypt Subjectitpost-new.top Fingerprint90:5A:8C:98:ED:2F:00:61:65:35:BC:7F:21:5E:62:14:5C:A7:53:5D ValidityWed, 07 Jun 2023 12:44:24 GMT - Tue, 05 Sep 2023 12:44:23 GMT
File typePNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced\012- data Hasha1dcb32c4dff2414bf59f9ea15384408 b3241b15b9eb6ea265c8fcf931eab5fd305f0e38 81012edba6a8252eb136c9ed8b84b5952f05ae6049fc62e6b11803c6601a0add
| Analyzer | Verdict | Alert |
|---|
| openphish | Poste Italiane S.p.A | |
GET /static/picture/accedi-bp-click.png HTTP/1.1
Host: itpost-new.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://itpost-new.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 09 Jun 2023 12:18:31 GMT
content-type: image/png
content-length: 4367
last-modified: Fri, 24 Feb 2023 14:43:50 GMT
etag: "63f8cd26-110f"
expires: Sun, 09 Jul 2023 12:18:31 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| itpost-new.top/static/picture/pago-bollettino.png | 198.23.174.151 | 200 OK | 3.9 kB |
URL GET HTTP/2itpost-new.top/static/picture/pago-bollettino.png IP198.23.174.151:443 ASN#36352 AS-COLOCROSSING
CertificateIssuerLet's Encrypt Subjectitpost-new.top Fingerprint90:5A:8C:98:ED:2F:00:61:65:35:BC:7F:21:5E:62:14:5C:A7:53:5D ValidityWed, 07 Jun 2023 12:44:24 GMT - Tue, 05 Sep 2023 12:44:23 GMT
File typePNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced\012- data Hashfca308e85b4818367da55d778dfb9841 40118bd8d94ebe27ff04671ef8e20f0e57eff60d f7f88b42797eb4765772625fa081636aed240ac29dbbdb0dad1268a35d5cacbe
| Analyzer | Verdict | Alert |
|---|
| openphish | Poste Italiane S.p.A | |
GET /static/picture/pago-bollettino.png HTTP/1.1
Host: itpost-new.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://itpost-new.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 09 Jun 2023 12:18:31 GMT
content-type: image/png
content-length: 3865
last-modified: Fri, 24 Feb 2023 14:43:50 GMT
etag: "63f8cd26-f19"
expires: Sun, 09 Jul 2023 12:18:31 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| itpost-new.top/static/picture/F23-F24.png | 198.23.174.151 | 200 OK | 499 B |
URL GET HTTP/2itpost-new.top/static/picture/F23-F24.png IP198.23.174.151:443 ASN#36352 AS-COLOCROSSING
CertificateIssuerLet's Encrypt Subjectitpost-new.top Fingerprint90:5A:8C:98:ED:2F:00:61:65:35:BC:7F:21:5E:62:14:5C:A7:53:5D ValidityWed, 07 Jun 2023 12:44:24 GMT - Tue, 05 Sep 2023 12:44:23 GMT
File typePNG image data, 25 x 25, 8-bit/color RGBA, interlaced\012- data Hash6ce506952cb2f64f866a88bb4ceee719 e0316f90f77451112a8ca52ebab6dff0ca8220c6 bd5f678d341a8e0619235baffbe5cc07c9951098cc5bd105ef6e2541903c3e15
| Analyzer | Verdict | Alert |
|---|
| openphish | Poste Italiane S.p.A | |
GET /static/picture/F23-F24.png HTTP/1.1
Host: itpost-new.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://itpost-new.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 09 Jun 2023 12:18:31 GMT
content-type: image/png
content-length: 499
last-modified: Fri, 24 Feb 2023 14:43:50 GMT
etag: "63f8cd26-1f3"
expires: Sun, 09 Jul 2023 12:18:31 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| itpost-new.top/static/picture/ricarica-telefonica.png | 198.23.174.151 | 200 OK | 671 B |
URL GET HTTP/2itpost-new.top/static/picture/ricarica-telefonica.png IP198.23.174.151:443 ASN#36352 AS-COLOCROSSING
CertificateIssuerLet's Encrypt Subjectitpost-new.top Fingerprint90:5A:8C:98:ED:2F:00:61:65:35:BC:7F:21:5E:62:14:5C:A7:53:5D ValidityWed, 07 Jun 2023 12:44:24 GMT - Tue, 05 Sep 2023 12:44:23 GMT
File typePNG image data, 25 x 25, 8-bit/color RGBA, interlaced\012- data Hash6782cb5493607b34395ad2d2aa3ffece 75d9842d2505d72df64e6687fbdc76e00d2ae842 f73fe0129e534b0c670be4797e82645cc3514ae19ee1e4aaa33709c13c48b2da
| Analyzer | Verdict | Alert |
|---|
| openphish | Poste Italiane S.p.A | |
GET /static/picture/ricarica-telefonica.png HTTP/1.1
Host: itpost-new.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://itpost-new.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 09 Jun 2023 12:18:31 GMT
content-type: image/png
content-length: 671
last-modified: Fri, 24 Feb 2023 14:43:50 GMT
etag: "63f8cd26-29f"
expires: Sun, 09 Jul 2023 12:18:31 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| itpost-new.top/static/picture/bonifici.png | 198.23.174.151 | 200 OK | 598 B |
URL GET HTTP/2itpost-new.top/static/picture/bonifici.png IP198.23.174.151:443 ASN#36352 AS-COLOCROSSING
CertificateIssuerLet's Encrypt Subjectitpost-new.top Fingerprint90:5A:8C:98:ED:2F:00:61:65:35:BC:7F:21:5E:62:14:5C:A7:53:5D ValidityWed, 07 Jun 2023 12:44:24 GMT - Tue, 05 Sep 2023 12:44:23 GMT
File typePNG image data, 25 x 25, 8-bit/color RGBA, interlaced\012- data Hasha164e04639147c0de16d33fdebdf1234 1eff0a2a05b1ae87945f77ecffba0cfc5709c106 498bf85effd24340de6ff49934248a912282ad12db9f9dd039f245ca307e0834
| Analyzer | Verdict | Alert |
|---|
| openphish | Poste Italiane S.p.A | |
GET /static/picture/bonifici.png HTTP/1.1
Host: itpost-new.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://itpost-new.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 09 Jun 2023 12:18:31 GMT
content-type: image/png
content-length: 598
last-modified: Fri, 24 Feb 2023 14:43:50 GMT
etag: "63f8cd26-256"
expires: Sun, 09 Jul 2023 12:18:31 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| itpost-new.top/static/picture/controlla-conti-altre-banche.png | 198.23.174.151 | 200 OK | 688 B |
URL GET HTTP/2itpost-new.top/static/picture/controlla-conti-altre-banche.png IP198.23.174.151:443 ASN#36352 AS-COLOCROSSING
CertificateIssuerLet's Encrypt Subjectitpost-new.top Fingerprint90:5A:8C:98:ED:2F:00:61:65:35:BC:7F:21:5E:62:14:5C:A7:53:5D ValidityWed, 07 Jun 2023 12:44:24 GMT - Tue, 05 Sep 2023 12:44:23 GMT
File typePNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced\012- data Hash1084e29ba820413701b77b0eeb239464 1f1c2144e7726429942369204f83e16b989d9d7d 65dce81a82cb0a61e077df27833e300fb3d01f33399a506e52453b4f17983f90
| Analyzer | Verdict | Alert |
|---|
| openphish | Poste Italiane S.p.A | |
GET /static/picture/controlla-conti-altre-banche.png HTTP/1.1
Host: itpost-new.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://itpost-new.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 09 Jun 2023 12:18:31 GMT
content-type: image/png
content-length: 688
last-modified: Fri, 24 Feb 2023 14:43:50 GMT
etag: "63f8cd26-2b0"
expires: Sun, 09 Jul 2023 12:18:31 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| itpost-new.top/static/picture/ricarica-postepay.png | 198.23.174.151 | 200 OK | 679 B |
URL GET HTTP/2itpost-new.top/static/picture/ricarica-postepay.png IP198.23.174.151:443 ASN#36352 AS-COLOCROSSING
CertificateIssuerLet's Encrypt Subjectitpost-new.top Fingerprint90:5A:8C:98:ED:2F:00:61:65:35:BC:7F:21:5E:62:14:5C:A7:53:5D ValidityWed, 07 Jun 2023 12:44:24 GMT - Tue, 05 Sep 2023 12:44:23 GMT
File typePNG image data, 25 x 25, 8-bit/color RGBA, interlaced\012- data Hash1e35e42427766a2dc1617f500f62469a ab81cfd38ef33800cea3134be72a87c98a6a94e5 537c38b19916355a666e352da137bb1631d29350c1705e2a7b8cb10e50019821
| Analyzer | Verdict | Alert |
|---|
| openphish | Poste Italiane S.p.A | |
GET /static/picture/ricarica-postepay.png HTTP/1.1
Host: itpost-new.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://itpost-new.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 09 Jun 2023 12:18:31 GMT
content-type: image/png
content-length: 679
last-modified: Fri, 24 Feb 2023 14:43:50 GMT
etag: "63f8cd26-2a7"
expires: Sun, 09 Jul 2023 12:18:31 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| itpost-new.top/static/picture/risparmia-investi-1.png | 198.23.174.151 | 200 OK | 613 B |
URL GET HTTP/2itpost-new.top/static/picture/risparmia-investi-1.png IP198.23.174.151:443 ASN#36352 AS-COLOCROSSING
CertificateIssuerLet's Encrypt Subjectitpost-new.top Fingerprint90:5A:8C:98:ED:2F:00:61:65:35:BC:7F:21:5E:62:14:5C:A7:53:5D ValidityWed, 07 Jun 2023 12:44:24 GMT - Tue, 05 Sep 2023 12:44:23 GMT
File typePNG image data, 25 x 25, 8-bit/color RGBA, interlaced\012- data Hash6029085d7ffeb2b98ed10bba6d9a9981 daac09c858e67f0fb0de08baa7a59d773a3a9edd b5401a36ab0dd4bd4f41f8a226d427e7b55ad1f6db6eb79966004124e928a2df
| Analyzer | Verdict | Alert |
|---|
| openphish | Poste Italiane S.p.A | |
GET /static/picture/risparmia-investi-1.png HTTP/1.1
Host: itpost-new.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://itpost-new.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 09 Jun 2023 12:18:31 GMT
content-type: image/png
content-length: 613
last-modified: Fri, 24 Feb 2023 14:43:50 GMT
etag: "63f8cd26-265"
expires: Sun, 09 Jul 2023 12:18:31 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| itpost-new.top/static/picture/libretto-smart.png | 198.23.174.151 | 200 OK | 4.0 kB |
URL GET HTTP/2itpost-new.top/static/picture/libretto-smart.png IP198.23.174.151:443 ASN#36352 AS-COLOCROSSING
CertificateIssuerLet's Encrypt Subjectitpost-new.top Fingerprint90:5A:8C:98:ED:2F:00:61:65:35:BC:7F:21:5E:62:14:5C:A7:53:5D ValidityWed, 07 Jun 2023 12:44:24 GMT - Tue, 05 Sep 2023 12:44:23 GMT
File typePNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced\012- data Hash6da07a17f420e2b22372b1749c227654 65274d045efbb5f1e4036aca0d30ed74e4c048d0 d49d62697b59b02ae62c51fec93a4b3b25d4b3416d58214d577e9ba38ac2edba
| Analyzer | Verdict | Alert |
|---|
| openphish | Poste Italiane S.p.A | |
GET /static/picture/libretto-smart.png HTTP/1.1
Host: itpost-new.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://itpost-new.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 09 Jun 2023 12:18:31 GMT
content-type: image/png
content-length: 3959
last-modified: Fri, 24 Feb 2023 14:43:50 GMT
etag: "63f8cd26-f77"
expires: Sun, 09 Jul 2023 12:18:31 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| itpost-new.top/static/picture/ico-pianificazione-finanziaria.png | 198.23.174.151 | 200 OK | 590 B |
URL GET HTTP/2itpost-new.top/static/picture/ico-pianificazione-finanziaria.png IP198.23.174.151:443 ASN#36352 AS-COLOCROSSING
CertificateIssuerLet's Encrypt Subjectitpost-new.top Fingerprint90:5A:8C:98:ED:2F:00:61:65:35:BC:7F:21:5E:62:14:5C:A7:53:5D ValidityWed, 07 Jun 2023 12:44:24 GMT - Tue, 05 Sep 2023 12:44:23 GMT
File typePNG image data, 25 x 25, 8-bit/color RGBA, non-interlaced\012- data Hash61fdffc9e7c95c96e8bdf4120e15304d c36675d20e9b697b0eb4d2bd2056cc59a817acd2 fd7c63228f5b2ea50bcfe3415a03df7e6af1f3f69973856ad56c1c6851d16383
| Analyzer | Verdict | Alert |
|---|
| openphish | Poste Italiane S.p.A | |
GET /static/picture/ico-pianificazione-finanziaria.png HTTP/1.1
Host: itpost-new.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://itpost-new.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 09 Jun 2023 12:18:31 GMT
content-type: image/png
content-length: 590
last-modified: Fri, 24 Feb 2023 14:43:50 GMT
etag: "63f8cd26-24e"
expires: Sun, 09 Jul 2023 12:18:31 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| itpost-new.top/static/picture/login-postevita.png | 198.23.174.151 | 200 OK | 4.1 kB |
URL GET HTTP/2itpost-new.top/static/picture/login-postevita.png IP198.23.174.151:443 ASN#36352 AS-COLOCROSSING
CertificateIssuerLet's Encrypt Subjectitpost-new.top Fingerprint90:5A:8C:98:ED:2F:00:61:65:35:BC:7F:21:5E:62:14:5C:A7:53:5D ValidityWed, 07 Jun 2023 12:44:24 GMT - Tue, 05 Sep 2023 12:44:23 GMT
File typePNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced\012- data Hashbbee007fb5ef4e38eab27111981e28e1 3c9d58cb8c9790f1cd7987d059bf9e75c8dc058a 0ba3246286f4ae5383db15b71123bbcddd4fa531777e88d2f3541f5bc35f8924
| Analyzer | Verdict | Alert |
|---|
| openphish | Poste Italiane S.p.A | |
GET /static/picture/login-postevita.png HTTP/1.1
Host: itpost-new.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://itpost-new.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 09 Jun 2023 12:18:31 GMT
content-type: image/png
content-length: 4065
last-modified: Fri, 24 Feb 2023 14:43:50 GMT
etag: "63f8cd26-fe1"
expires: Sun, 09 Jul 2023 12:18:31 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| itpost-new.top/static/picture/trading.png | 198.23.174.151 | 200 OK | 4.2 kB |
URL GET HTTP/2itpost-new.top/static/picture/trading.png IP198.23.174.151:443 ASN#36352 AS-COLOCROSSING
CertificateIssuerLet's Encrypt Subjectitpost-new.top Fingerprint90:5A:8C:98:ED:2F:00:61:65:35:BC:7F:21:5E:62:14:5C:A7:53:5D ValidityWed, 07 Jun 2023 12:44:24 GMT - Tue, 05 Sep 2023 12:44:23 GMT
File typePNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced\012- data Hash119e796926c6a000a3113f620d0d7902 a3f8b69a69d3ac7bd2bf867dd26509cc2e3ad8b7 fbf9efd57e727fc86593f6a81352b1e97560c91848d57d6507b0102185bf22bc
| Analyzer | Verdict | Alert |
|---|
| openphish | Poste Italiane S.p.A | |
GET /static/picture/trading.png HTTP/1.1
Host: itpost-new.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://itpost-new.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 09 Jun 2023 12:18:31 GMT
content-type: image/png
content-length: 4228
last-modified: Fri, 24 Feb 2023 14:43:50 GMT
etag: "63f8cd26-1084"
expires: Sun, 09 Jul 2023 12:18:31 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| itpost-new.top/static/picture/simulatore-previdenziale.png | 198.23.174.151 | 200 OK | 857 B |
URL GET HTTP/2itpost-new.top/static/picture/simulatore-previdenziale.png IP198.23.174.151:443 ASN#36352 AS-COLOCROSSING
CertificateIssuerLet's Encrypt Subjectitpost-new.top Fingerprint90:5A:8C:98:ED:2F:00:61:65:35:BC:7F:21:5E:62:14:5C:A7:53:5D ValidityWed, 07 Jun 2023 12:44:24 GMT - Tue, 05 Sep 2023 12:44:23 GMT
File typePNG image data, 25 x 25, 8-bit/color RGBA, interlaced\012- data Hash09901ffe1d9eb360c205ffc6c23f8dd8 18a1bc4f3690ca879f57803b2d4e3783fcab06bc 4a077c623eb14f796eb33b9be64995b23d368134df2194dc929444f60c08bc20
| Analyzer | Verdict | Alert |
|---|
| openphish | Poste Italiane S.p.A | |
GET /static/picture/simulatore-previdenziale.png HTTP/1.1
Host: itpost-new.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://itpost-new.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 09 Jun 2023 12:18:31 GMT
content-type: image/png
content-length: 857
last-modified: Fri, 24 Feb 2023 14:43:51 GMT
etag: "63f8cd27-359"
expires: Sun, 09 Jul 2023 12:18:31 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| itpost-new.top/static/picture/ico-titoli-di-stato.png | 198.23.174.151 | 200 OK | 855 B |
URL GET HTTP/2itpost-new.top/static/picture/ico-titoli-di-stato.png IP198.23.174.151:443 ASN#36352 AS-COLOCROSSING
CertificateIssuerLet's Encrypt Subjectitpost-new.top Fingerprint90:5A:8C:98:ED:2F:00:61:65:35:BC:7F:21:5E:62:14:5C:A7:53:5D ValidityWed, 07 Jun 2023 12:44:24 GMT - Tue, 05 Sep 2023 12:44:23 GMT
File typePNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced\012- data Hash226e12f91a7ef0db04584aa4a3398c66 e06891b72c44650259b4a4b48b9161de91522be0 3c8b7900fa23c8ba6ff4898e7464151937ff106a44776029aafcdfb048e389d0
| Analyzer | Verdict | Alert |
|---|
| openphish | Poste Italiane S.p.A | |
GET /static/picture/ico-titoli-di-stato.png HTTP/1.1
Host: itpost-new.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://itpost-new.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 09 Jun 2023 12:18:31 GMT
content-type: image/png
content-length: 855
last-modified: Fri, 24 Feb 2023 14:43:51 GMT
etag: "63f8cd27-357"
expires: Sun, 09 Jul 2023 12:18:31 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| itpost-new.top/static/picture/creare-pensione-1.png | 198.23.174.151 | 200 OK | 599 B |
URL GET HTTP/2itpost-new.top/static/picture/creare-pensione-1.png IP198.23.174.151:443 ASN#36352 AS-COLOCROSSING
CertificateIssuerLet's Encrypt Subjectitpost-new.top Fingerprint90:5A:8C:98:ED:2F:00:61:65:35:BC:7F:21:5E:62:14:5C:A7:53:5D ValidityWed, 07 Jun 2023 12:44:24 GMT - Tue, 05 Sep 2023 12:44:23 GMT
File typePNG image data, 25 x 25, 8-bit/color RGBA, interlaced\012- data Hash53ca3d99b2d2109bd9e7eed5220c3d6d 7c3fb3ba9033f16dce6ba39023b30d6b3c466a70 179b41b480067d7d3b1229b7163bb0ee2dc6c31ecd3cec414dacb7034c5f63c6
| Analyzer | Verdict | Alert |
|---|
| openphish | Poste Italiane S.p.A | |
GET /static/picture/creare-pensione-1.png HTTP/1.1
Host: itpost-new.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://itpost-new.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 09 Jun 2023 12:18:31 GMT
content-type: image/png
content-length: 599
last-modified: Fri, 24 Feb 2023 14:43:51 GMT
etag: "63f8cd27-257"
expires: Sun, 09 Jul 2023 12:18:31 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| itpost-new.top/static/picture/versamento-tfr.png | 198.23.174.151 | 200 OK | 725 B |
URL GET HTTP/2itpost-new.top/static/picture/versamento-tfr.png IP198.23.174.151:443 ASN#36352 AS-COLOCROSSING
CertificateIssuerLet's Encrypt Subjectitpost-new.top Fingerprint90:5A:8C:98:ED:2F:00:61:65:35:BC:7F:21:5E:62:14:5C:A7:53:5D ValidityWed, 07 Jun 2023 12:44:24 GMT - Tue, 05 Sep 2023 12:44:23 GMT
File typePNG image data, 25 x 25, 8-bit/color RGBA, interlaced\012- data Hasha2d9b14a81cf41e44f2e4e1477be0afe 5f34f575af9fa29061e8f2fb596a7af715123436 77c054d932b9cba36de00a50326bd70cb72e6f711de391b22ac113f9e120318e
| Analyzer | Verdict | Alert |
|---|
| openphish | Poste Italiane S.p.A | |
GET /static/picture/versamento-tfr.png HTTP/1.1
Host: itpost-new.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://itpost-new.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 09 Jun 2023 12:18:31 GMT
content-type: image/png
content-length: 725
last-modified: Fri, 24 Feb 2023 14:43:51 GMT
etag: "63f8cd27-2d5"
expires: Sun, 09 Jul 2023 12:18:31 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| itpost-new.top/static/picture/network-salute.png | 198.23.174.151 | 200 OK | 4.4 kB |
URL GET HTTP/2itpost-new.top/static/picture/network-salute.png IP198.23.174.151:443 ASN#36352 AS-COLOCROSSING
CertificateIssuerLet's Encrypt Subjectitpost-new.top Fingerprint90:5A:8C:98:ED:2F:00:61:65:35:BC:7F:21:5E:62:14:5C:A7:53:5D ValidityWed, 07 Jun 2023 12:44:24 GMT - Tue, 05 Sep 2023 12:44:23 GMT
File typePNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced\012- data Hash7597b7275bb4daff76e5ed4f8c3a1937 e74dce2a6cabc37f6db0e7b7c351f063c81d5bf9 86e7c7079b93db8c3cf6caca84fbcde7be906d9bf702a2e4137153e69eb1ed01
| Analyzer | Verdict | Alert |
|---|
| openphish | Poste Italiane S.p.A | |
GET /static/picture/network-salute.png HTTP/1.1
Host: itpost-new.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://itpost-new.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 09 Jun 2023 12:18:31 GMT
content-type: image/png
content-length: 4368
last-modified: Fri, 24 Feb 2023 14:43:51 GMT
etag: "63f8cd27-1110"
expires: Sun, 09 Jul 2023 12:18:31 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| itpost-new.top/static/picture/checkup-assicurativo.png | 198.23.174.151 | 200 OK | 4.2 kB |
URL GET HTTP/2itpost-new.top/static/picture/checkup-assicurativo.png IP198.23.174.151:443 ASN#36352 AS-COLOCROSSING
CertificateIssuerLet's Encrypt Subjectitpost-new.top Fingerprint90:5A:8C:98:ED:2F:00:61:65:35:BC:7F:21:5E:62:14:5C:A7:53:5D ValidityWed, 07 Jun 2023 12:44:24 GMT - Tue, 05 Sep 2023 12:44:23 GMT
File typePNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced\012- data Hash9e024de512ffdf9ca64c4d40134266b3 1fca982354f709606a98441a5345e00de0a4d8b0 b524f42b69297066698cacd16e18b5f91ef74920cf4c72e710d92be210e1d7fe
| Analyzer | Verdict | Alert |
|---|
| openphish | Poste Italiane S.p.A | |
GET /static/picture/checkup-assicurativo.png HTTP/1.1
Host: itpost-new.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://itpost-new.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 09 Jun 2023 12:18:31 GMT
content-type: image/png
content-length: 4167
last-modified: Fri, 24 Feb 2023 14:43:51 GMT
etag: "63f8cd27-1047"
expires: Sun, 09 Jul 2023 12:18:31 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| itpost-new.top/static/picture/raccoltatarghe.png | 198.23.174.151 | 200 OK | 866 B |
URL GET HTTP/2itpost-new.top/static/picture/raccoltatarghe.png IP198.23.174.151:443 ASN#36352 AS-COLOCROSSING
CertificateIssuerLet's Encrypt Subjectitpost-new.top Fingerprint90:5A:8C:98:ED:2F:00:61:65:35:BC:7F:21:5E:62:14:5C:A7:53:5D ValidityWed, 07 Jun 2023 12:44:24 GMT - Tue, 05 Sep 2023 12:44:23 GMT
File typePNG image data, 21 x 22, 8-bit/color RGBA, non-interlaced\012- data Hash1a733ce044475286a92609ecdf185e1f edf9227f7dc03d8410d879bc4b52776bd707ea85 70c104209febc6e923a5132ae2175b59241807e9261467d8ea219fb1fc243c75
| Analyzer | Verdict | Alert |
|---|
| openphish | Poste Italiane S.p.A | |
GET /static/picture/raccoltatarghe.png HTTP/1.1
Host: itpost-new.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://itpost-new.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 09 Jun 2023 12:18:31 GMT
content-type: image/png
content-length: 866
last-modified: Fri, 24 Feb 2023 14:43:51 GMT
etag: "63f8cd27-362"
expires: Sun, 09 Jul 2023 12:18:31 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| itpost-new.top/static/picture/poste-id.png | 198.23.174.151 | 200 OK | 4.0 kB |
URL GET HTTP/2itpost-new.top/static/picture/poste-id.png IP198.23.174.151:443 ASN#36352 AS-COLOCROSSING
CertificateIssuerLet's Encrypt Subjectitpost-new.top Fingerprint90:5A:8C:98:ED:2F:00:61:65:35:BC:7F:21:5E:62:14:5C:A7:53:5D ValidityWed, 07 Jun 2023 12:44:24 GMT - Tue, 05 Sep 2023 12:44:23 GMT
File typePNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced\012- data Hash673da3dd65d761fd6cdccdcd8c2824f6 89f4e34bfb94a0f3808b7925d266322ff982c4a6 b79444708f3e1cf4c987f2a2a219cec6bf48013698996d5ad359bde36daf1523
| Analyzer | Verdict | Alert |
|---|
| openphish | Poste Italiane S.p.A | |
GET /static/picture/poste-id.png HTTP/1.1
Host: itpost-new.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://itpost-new.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 09 Jun 2023 12:18:31 GMT
content-type: image/png
content-length: 4013
last-modified: Fri, 24 Feb 2023 14:43:51 GMT
etag: "63f8cd27-fad"
expires: Sun, 09 Jul 2023 12:18:31 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| itpost-new.top/static/picture/sim.png | 198.23.174.151 | 200 OK | 4.7 kB |
URL GET HTTP/2itpost-new.top/static/picture/sim.png IP198.23.174.151:443 ASN#36352 AS-COLOCROSSING
CertificateIssuerLet's Encrypt Subjectitpost-new.top Fingerprint90:5A:8C:98:ED:2F:00:61:65:35:BC:7F:21:5E:62:14:5C:A7:53:5D ValidityWed, 07 Jun 2023 12:44:24 GMT - Tue, 05 Sep 2023 12:44:23 GMT
File typePNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced\012- data Hash561007163f5cbe0a66824a31cfb1b969 aab4aa96abbeec14ee472e9864e5677013095493 90f291144c7fadca1b128050caf24c22653b854778fb2426ae057af3c9bf310b
| Analyzer | Verdict | Alert |
|---|
| openphish | Poste Italiane S.p.A | |
GET /static/picture/sim.png HTTP/1.1
Host: itpost-new.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://itpost-new.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 09 Jun 2023 12:18:31 GMT
content-type: image/png
content-length: 4703
last-modified: Fri, 24 Feb 2023 14:43:51 GMT
etag: "63f8cd27-125f"
expires: Sun, 09 Jul 2023 12:18:31 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| itpost-new.top/static/picture/acquista-fdr-1x.png | 198.23.174.151 | 200 OK | 628 B |
URL GET HTTP/2itpost-new.top/static/picture/acquista-fdr-1x.png IP198.23.174.151:443 ASN#36352 AS-COLOCROSSING
CertificateIssuerLet's Encrypt Subjectitpost-new.top Fingerprint90:5A:8C:98:ED:2F:00:61:65:35:BC:7F:21:5E:62:14:5C:A7:53:5D ValidityWed, 07 Jun 2023 12:44:24 GMT - Tue, 05 Sep 2023 12:44:23 GMT
File typePNG image data, 25 x 25, 8-bit/color RGBA, non-interlaced\012- data Hashe8903f7f920519fa4efaf5afe3f579c9 567d3f6a782f56d0bc07eb76f6042bd79a970341 42843744a90e42b69159dccfe703c3706d8c1fb77447bd8a0fff134065534b92
| Analyzer | Verdict | Alert |
|---|
| openphish | Poste Italiane S.p.A | |
GET /static/picture/acquista-fdr-1x.png HTTP/1.1
Host: itpost-new.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://itpost-new.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 09 Jun 2023 12:18:31 GMT
content-type: image/png
content-length: 628
last-modified: Fri, 24 Feb 2023 14:43:51 GMT
etag: "63f8cd27-274"
expires: Sun, 09 Jul 2023 12:18:31 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| itpost-new.top/static/picture/gestisci-fdr-1x.png | 198.23.174.151 | 200 OK | 713 B |
URL GET HTTP/2itpost-new.top/static/picture/gestisci-fdr-1x.png IP198.23.174.151:443 ASN#36352 AS-COLOCROSSING
CertificateIssuerLet's Encrypt Subjectitpost-new.top Fingerprint90:5A:8C:98:ED:2F:00:61:65:35:BC:7F:21:5E:62:14:5C:A7:53:5D ValidityWed, 07 Jun 2023 12:44:24 GMT - Tue, 05 Sep 2023 12:44:23 GMT
File typePNG image data, 25 x 25, 8-bit/color RGBA, non-interlaced\012- data Hash5d4d5dfb139cb770e9d91baefb7de731 126df5daaa45459d2a85914602a570f33df2094f 61e6c5e08eec1fe5a818c3946e96cedfcc58e52d1b58b1c6cb01898641583b14
| Analyzer | Verdict | Alert |
|---|
| openphish | Poste Italiane S.p.A | |
GET /static/picture/gestisci-fdr-1x.png HTTP/1.1
Host: itpost-new.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://itpost-new.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 09 Jun 2023 12:18:31 GMT
content-type: image/png
content-length: 713
last-modified: Fri, 24 Feb 2023 14:43:51 GMT
etag: "63f8cd27-2c9"
expires: Sun, 09 Jul 2023 12:18:31 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| itpost-new.top/static/picture/gestione-patrimoniale.png | 198.23.174.151 | 200 OK | 903 B |
URL GET HTTP/2itpost-new.top/static/picture/gestione-patrimoniale.png IP198.23.174.151:443 ASN#36352 AS-COLOCROSSING
CertificateIssuerLet's Encrypt Subjectitpost-new.top Fingerprint90:5A:8C:98:ED:2F:00:61:65:35:BC:7F:21:5E:62:14:5C:A7:53:5D ValidityWed, 07 Jun 2023 12:44:24 GMT - Tue, 05 Sep 2023 12:44:23 GMT
File typePNG image data, 16 x 24, 8-bit/color RGBA, non-interlaced\012- data Hash179077594493c22851773704094914cb eca4417ffdf2fe25e323820645069dc1b4f71ec0 6ff02f3258a2f937b2cf4602c3e5b8f332ce4d91d4218fd570de05ee3411870f
| Analyzer | Verdict | Alert |
|---|
| openphish | Poste Italiane S.p.A | |
GET /static/picture/gestione-patrimoniale.png HTTP/1.1
Host: itpost-new.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://itpost-new.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 09 Jun 2023 12:18:31 GMT
content-type: image/png
content-length: 903
last-modified: Fri, 24 Feb 2023 14:43:51 GMT
etag: "63f8cd27-387"
expires: Sun, 09 Jul 2023 12:18:31 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| itpost-new.top/static/picture/cresceresostenibili.png | 198.23.174.151 | 200 OK | 5.7 kB |
URL GET HTTP/2itpost-new.top/static/picture/cresceresostenibili.png IP198.23.174.151:443 ASN#36352 AS-COLOCROSSING
CertificateIssuerLet's Encrypt Subjectitpost-new.top Fingerprint90:5A:8C:98:ED:2F:00:61:65:35:BC:7F:21:5E:62:14:5C:A7:53:5D ValidityWed, 07 Jun 2023 12:44:24 GMT - Tue, 05 Sep 2023 12:44:23 GMT
File typePNG image data, 152 x 49, 8-bit/color RGBA, non-interlaced\012- data Hash7bf09ec496955950576ef7eec9b876ad e652dbf303e7fff82edb4ca252dc6620c670fb85 a56f179c9162c934c44ccef0a597eb723e125b84f367b10753d9b10dd1d1ab44
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Poste Italiane | | openphish | Poste Italiane S.p.A | |
GET /static/picture/cresceresostenibili.png HTTP/1.1
Host: itpost-new.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://itpost-new.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 09 Jun 2023 12:18:31 GMT
content-type: image/png
content-length: 5666
last-modified: Fri, 24 Feb 2023 14:43:51 GMT
etag: "63f8cd27-1622"
expires: Sun, 09 Jul 2023 12:18:31 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| itpost-new.top/static/picture/logo-posteid.png | 198.23.174.151 | 200 OK | 8.1 kB |
URL GET HTTP/2itpost-new.top/static/picture/logo-posteid.png IP198.23.174.151:443 ASN#36352 AS-COLOCROSSING
CertificateIssuerLet's Encrypt Subjectitpost-new.top Fingerprint90:5A:8C:98:ED:2F:00:61:65:35:BC:7F:21:5E:62:14:5C:A7:53:5D ValidityWed, 07 Jun 2023 12:44:24 GMT - Tue, 05 Sep 2023 12:44:23 GMT
File typePNG image data, 170 x 48, 8-bit/color RGBA, non-interlaced\012- data Hash513a7ca24dfd5959091166869efc71cc 85acaab94b209c5882b6a9e44bb314cb5f88c072 64a42f338dfeb8a8d96426afc134df194afce1dcf0fb9771e02905b8e366103a
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Poste Italiane | | openphish | Poste Italiane S.p.A | |
GET /static/picture/logo-posteid.png HTTP/1.1
Host: itpost-new.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://itpost-new.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 09 Jun 2023 12:18:31 GMT
content-type: image/png
content-length: 8121
last-modified: Fri, 24 Feb 2023 14:43:51 GMT
etag: "63f8cd27-1fb9"
expires: Sun, 09 Jul 2023 12:18:31 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.poste.it/icone-cta/bollettini-bianchi.png | 13.107.229.26 | 200 OK | 348 B |
URL GET HTTP/2www.poste.it/icone-cta/bollettini-bianchi.png IP13.107.229.26:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
CertificateIssuerGlobalSign nv-sa Subjectwww.poste.it Fingerprint2F:FA:CF:BF:0A:E8:2C:CE:BF:2E:4D:41:21:64:9F:14:0B:D0:95:10 ValidityTue, 28 Mar 2023 10:46:03 GMT - Sun, 28 Apr 2024 10:46:02 GMT
File typePNG image data, 25 x 25, 8-bit/color RGBA, interlaced\012- data Hashcf5d03e266b2c0fe561e0179f495e185 fd5c26c3f4d428e4c16b50692151c1d5b6a57128 6ec494d776f77488d5fdb3e03cbfd1669c9f2419211bed21ac006d7e91d8cd01
GET /icone-cta/bollettini-bianchi.png HTTP/1.1
Host: www.poste.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://itpost-new.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: max-age=3600,public
pragma: public
content-length: 348
content-type: image/png
expires: Fri, 09 Jun 2023 13:18:31 GMT
last-modified: Wed, 20 Oct 2021 13:59:23 GMT
accept-ranges: bytes
etag: "617020bb-15c"
x-cache: CONFIG_NOCACHE
x-azure-ref: 0lxiDZAAAAAC8ZyDGRtywRbSsLIU3w5xSU1ZHMjBFREdFMDUxNABiZWE0YWQ2MS1kNWI2LTRmYmYtOWYyMC04NzJlNzI1N2U1NmE=
date: Fri, 09 Jun 2023 12:18:31 GMT
X-Firefox-Spdy: h2
|
|
| www.poste.it/icone-cta/bollo-auto.png | 13.107.229.26 | 200 OK | 4.1 kB |
URL GET HTTP/2www.poste.it/icone-cta/bollo-auto.png IP13.107.229.26:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
CertificateIssuerGlobalSign nv-sa Subjectwww.poste.it Fingerprint2F:FA:CF:BF:0A:E8:2C:CE:BF:2E:4D:41:21:64:9F:14:0B:D0:95:10 ValidityTue, 28 Mar 2023 10:46:03 GMT - Sun, 28 Apr 2024 10:46:02 GMT
File typePNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced\012- data Hashf5d1cefc1ffd4870b42a49f7eb54a0fb 5106e61d235f3719a6ad423491d980cb4c6a35ee bf62f55e7a184b11a2809503ae7122959c614af6b0c99d1f0e77d735cac7e21f
GET /icone-cta/bollo-auto.png HTTP/1.1
Host: www.poste.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://itpost-new.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: max-age=3600,public
pragma: public
content-length: 4112
content-type: image/png
expires: Fri, 09 Jun 2023 13:18:31 GMT
last-modified: Wed, 20 Oct 2021 13:59:23 GMT
accept-ranges: bytes
etag: "617020bb-1010"
x-cache: CONFIG_NOCACHE
x-azure-ref: 0lxiDZAAAAABaow2CEK9uT7w4OPeu4aZwU1ZHMjBFREdFMDUxNABiZWE0YWQ2MS1kNWI2LTRmYmYtOWYyMC04NzJlNzI1N2U1NmE=
date: Fri, 09 Jun 2023 12:18:31 GMT
X-Firefox-Spdy: h2
|
|
| www.poste.it/icone-cta/F23-F24.png | 13.107.229.26 | 200 OK | 499 B |
URL GET HTTP/2www.poste.it/icone-cta/F23-F24.png IP13.107.229.26:443 ASN#8075 MICROSOFT-CORP-MSN-AS-BLOCK
CertificateIssuerGlobalSign nv-sa Subjectwww.poste.it Fingerprint2F:FA:CF:BF:0A:E8:2C:CE:BF:2E:4D:41:21:64:9F:14:0B:D0:95:10 ValidityTue, 28 Mar 2023 10:46:03 GMT - Sun, 28 Apr 2024 10:46:02 GMT
File typePNG image data, 25 x 25, 8-bit/color RGBA, interlaced\012- data Hash6ce506952cb2f64f866a88bb4ceee719 e0316f90f77451112a8ca52ebab6dff0ca8220c6 bd5f678d341a8e0619235baffbe5cc07c9951098cc5bd105ef6e2541903c3e15
GET /icone-cta/F23-F24.png HTTP/1.1
Host: www.poste.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://itpost-new.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: max-age=3600,public
pragma: public
content-length: 499
content-type: image/png
expires: Fri, 09 Jun 2023 13:18:31 GMT
last-modified: Wed, 20 Oct 2021 13:59:23 GMT
accept-ranges: bytes
etag: "617020bb-1f3"
x-cache: CONFIG_NOCACHE
x-azure-ref: 0lxiDZAAAAAAwpZefrXJ5SambpZJuhwhqU1ZHMjBFREdFMDUxNABiZWE0YWQ2MS1kNWI2LTRmYmYtOWYyMC04NzJlNzI1N2U1NmE=
date: Fri, 09 Jun 2023 12:18:31 GMT
X-Firefox-Spdy: h2
|
|
| itpost-new.top/static/css/typography.css | 198.23.174.151 | 200 OK | 2.2 kB |
URL GET HTTP/2itpost-new.top/static/css/typography.css IP198.23.174.151:443 ASN#36352 AS-COLOCROSSING
CertificateIssuerLet's Encrypt Subjectitpost-new.top Fingerprint90:5A:8C:98:ED:2F:00:61:65:35:BC:7F:21:5E:62:14:5C:A7:53:5D ValidityWed, 07 Jun 2023 12:44:24 GMT - Tue, 05 Sep 2023 12:44:23 GMT
File typegzip compressed data, from Unix\012- data Hash078aa8ea0399437efe967d264b9c6585 35e9362290eccd031a1de41720f659a7bb642aca 3941ac36c91df3b4ddb0686c51bbdcd5b25208f40296975a427f4437bf66342a
| Analyzer | Verdict | Alert |
|---|
| openphish | Poste Italiane S.p.A | |
GET /static/css/typography.css HTTP/1.1
Host: itpost-new.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://itpost-new.top/static/css/base.css
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 09 Jun 2023 12:18:31 GMT
content-type: text/css
last-modified: Fri, 24 Feb 2023 14:44:17 GMT
vary: Accept-Encoding
etag: W/"63f8cd41-1444"
expires: Sat, 10 Jun 2023 00:18:31 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| itpost-new.top/static/image/ico-assistenza-domande-frequenti.png | 198.23.174.151 | 200 OK | 667 B |
URL GET HTTP/2itpost-new.top/static/image/ico-assistenza-domande-frequenti.png IP198.23.174.151:443 ASN#36352 AS-COLOCROSSING
CertificateIssuerLet's Encrypt Subjectitpost-new.top Fingerprint90:5A:8C:98:ED:2F:00:61:65:35:BC:7F:21:5E:62:14:5C:A7:53:5D ValidityWed, 07 Jun 2023 12:44:24 GMT - Tue, 05 Sep 2023 12:44:23 GMT
File typePNG image data, 25 x 24, 8-bit/color RGBA, interlaced\012- data Hash8f2852b7bbd38844fca34aa5dcfc888e d1de7c07d00e7194e81b8899b091487254dbbabc e9b0fe003419b3f44b6f5b2d1ca885b2db6681b3916a950a839b2d067d7c93b5
| Analyzer | Verdict | Alert |
|---|
| openphish | Poste Italiane S.p.A | |
GET /static/image/ico-assistenza-domande-frequenti.png HTTP/1.1
Host: itpost-new.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://itpost-new.top/static/css/base-element.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 09 Jun 2023 12:18:32 GMT
content-type: image/png
content-length: 667
last-modified: Fri, 24 Feb 2023 14:44:00 GMT
etag: "63f8cd30-29b"
expires: Sun, 09 Jul 2023 12:18:32 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| itpost-new.top/static/css/extra.css | 198.23.174.151 | 200 OK | 1.6 kB |
URL GET HTTP/2itpost-new.top/static/css/extra.css IP198.23.174.151:443 ASN#36352 AS-COLOCROSSING
CertificateIssuerLet's Encrypt Subjectitpost-new.top Fingerprint90:5A:8C:98:ED:2F:00:61:65:35:BC:7F:21:5E:62:14:5C:A7:53:5D ValidityWed, 07 Jun 2023 12:44:24 GMT - Tue, 05 Sep 2023 12:44:23 GMT
File typegzip compressed data, from Unix\012- data Hash9ad0d938d6bf5b27d362f59c89512f6b 5fadf5349732e6f9740228877182f7f8397c0721 c77b4702f23a75e805c8398bd23f47c99d66d8f7fe661b883040f48b93af68e8
| Analyzer | Verdict | Alert |
|---|
| openphish | Poste Italiane S.p.A | |
GET /static/css/extra.css HTTP/1.1
Host: itpost-new.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://itpost-new.top/static/css/base.css
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 09 Jun 2023 12:18:31 GMT
content-type: text/css
last-modified: Fri, 24 Feb 2023 14:44:17 GMT
vary: Accept-Encoding
etag: W/"63f8cd41-148b"
expires: Sat, 10 Jun 2023 00:18:31 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| itpost-new.top/static/image/ico-area-personale.png | 198.23.174.151 | 200 OK | 690 B |
URL GET HTTP/2itpost-new.top/static/image/ico-area-personale.png IP198.23.174.151:443 ASN#36352 AS-COLOCROSSING
CertificateIssuerLet's Encrypt Subjectitpost-new.top Fingerprint90:5A:8C:98:ED:2F:00:61:65:35:BC:7F:21:5E:62:14:5C:A7:53:5D ValidityWed, 07 Jun 2023 12:44:24 GMT - Tue, 05 Sep 2023 12:44:23 GMT
File typePNG image data, 24 x 24, 8-bit/color RGBA, interlaced\012- data Hash02c7869c1fa952b27df28dd202a35f90 c0f9605c3145a1440277696de167cb8fb99dc65d be2d4ba80a23eb741356722f3fff3fdb53790fd18e39118ffa55eedaffbff8a9
| Analyzer | Verdict | Alert |
|---|
| openphish | Poste Italiane S.p.A | |
GET /static/image/ico-area-personale.png HTTP/1.1
Host: itpost-new.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://itpost-new.top/static/css/base-element.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 09 Jun 2023 12:18:32 GMT
content-type: image/png
content-length: 690
last-modified: Fri, 24 Feb 2023 14:44:00 GMT
etag: "63f8cd30-2b2"
expires: Sun, 09 Jul 2023 12:18:32 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| itpost-new.top/static/css/alignment.css | 198.23.174.151 | 200 OK | 1.9 kB |
URL GET HTTP/2itpost-new.top/static/css/alignment.css IP198.23.174.151:443 ASN#36352 AS-COLOCROSSING
CertificateIssuerLet's Encrypt Subjectitpost-new.top Fingerprint90:5A:8C:98:ED:2F:00:61:65:35:BC:7F:21:5E:62:14:5C:A7:53:5D ValidityWed, 07 Jun 2023 12:44:24 GMT - Tue, 05 Sep 2023 12:44:23 GMT
File typegzip compressed data, from Unix\012- data Hash856d9ed73857afb01badacf7851aab31 1f2ee6ae2bf6490cc4bd92c0208b6638c0937708 8a018c50acc12eeb282facd7371dde23e3d38807549ba6accec2608edaf68812
| Analyzer | Verdict | Alert |
|---|
| openphish | Poste Italiane S.p.A | |
GET /static/css/alignment.css HTTP/1.1
Host: itpost-new.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://itpost-new.top/static/css/base.css
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 09 Jun 2023 12:18:31 GMT
content-type: text/css
last-modified: Fri, 24 Feb 2023 14:44:17 GMT
vary: Accept-Encoding
etag: W/"63f8cd41-aa6"
expires: Sat, 10 Jun 2023 00:18:31 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| itpost-new.top/static/image/a1-oss-premium-giornali.jpg | 198.23.174.151 | 200 OK | 102 kB |
URL GET HTTP/2itpost-new.top/static/image/a1-oss-premium-giornali.jpg IP198.23.174.151:443 ASN#36352 AS-COLOCROSSING
CertificateIssuerLet's Encrypt Subjectitpost-new.top Fingerprint90:5A:8C:98:ED:2F:00:61:65:35:BC:7F:21:5E:62:14:5C:A7:53:5D ValidityWed, 07 Jun 2023 12:44:24 GMT - Tue, 05 Sep 2023 12:44:23 GMT
File typeJPEG image data, progressive, precision 8, 1600x515, components 3\012- data Size102 kB (102070 bytes) Hasha9cb70f63582223c77d649402a703e0d ddccd383bb92e565a4b07d5da59d9c34dbc2ac87 a48511572a826b7ca6450a923a294783ebc19c44672e7e6c6736006afcedf48b
| Analyzer | Verdict | Alert |
|---|
| openphish | Poste Italiane S.p.A | |
GET /static/image/a1-oss-premium-giornali.jpg HTTP/1.1
Host: itpost-new.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://itpost-new.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 09 Jun 2023 12:18:32 GMT
content-type: image/jpeg
content-length: 102070
last-modified: Sun, 30 Apr 2023 12:25:20 GMT
etag: "644e5e30-18eb6"
expires: Sun, 09 Jul 2023 12:18:32 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| itpost-new.top/static/css/spaces.css | 198.23.174.151 | 200 OK | 9.1 kB |
URL GET HTTP/2itpost-new.top/static/css/spaces.css IP198.23.174.151:443 ASN#36352 AS-COLOCROSSING
CertificateIssuerLet's Encrypt Subjectitpost-new.top Fingerprint90:5A:8C:98:ED:2F:00:61:65:35:BC:7F:21:5E:62:14:5C:A7:53:5D ValidityWed, 07 Jun 2023 12:44:24 GMT - Tue, 05 Sep 2023 12:44:23 GMT
File typegzip compressed data, from Unix\012- data Hash33a734cd950bbdbe9c12655f2e64dc56 145bad7f178be82799d5d65e01d10029ab132ed2 83e0b7f01b5f832d65396f3d59e1474ac1b5111dabe00a41c80654f3de9e1c83
| Analyzer | Verdict | Alert |
|---|
| openphish | Poste Italiane S.p.A | |
GET /static/css/spaces.css HTTP/1.1
Host: itpost-new.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://itpost-new.top/static/css/base.css
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 09 Jun 2023 12:18:31 GMT
content-type: text/css
last-modified: Fri, 24 Feb 2023 14:44:17 GMT
vary: Accept-Encoding
etag: W/"63f8cd41-757f"
expires: Sat, 10 Jun 2023 00:18:31 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| itpost-new.top/static/css/fonts.css | 198.23.174.151 | 200 OK | 74 kB |
URL GET HTTP/2itpost-new.top/static/css/fonts.css IP198.23.174.151:443 ASN#36352 AS-COLOCROSSING
CertificateIssuerLet's Encrypt Subjectitpost-new.top Fingerprint90:5A:8C:98:ED:2F:00:61:65:35:BC:7F:21:5E:62:14:5C:A7:53:5D ValidityWed, 07 Jun 2023 12:44:24 GMT - Tue, 05 Sep 2023 12:44:23 GMT
File typegzip compressed data, from Unix\012- data Hasha76d44c25d982cb7d751a26637bfe9cd 52632403d90de477d43989c7b888c7b176066d62 95104163d92f700f5733dbd0df4b1822c822fb7227b702a947f41e9b0372b63e
| Analyzer | Verdict | Alert |
|---|
| openphish | Poste Italiane S.p.A | |
GET /static/css/fonts.css HTTP/1.1
Host: itpost-new.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://itpost-new.top/static/css/base.css
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 09 Jun 2023 12:18:31 GMT
content-type: text/css
last-modified: Fri, 24 Feb 2023 14:44:17 GMT
vary: Accept-Encoding
etag: W/"63f8cd41-f64"
expires: Sat, 10 Jun 2023 00:18:31 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| itpost-new.top/static/css/base-element.css | 198.23.174.151 | 200 OK | 353 kB |
URL GET HTTP/2itpost-new.top/static/css/base-element.css IP198.23.174.151:443 ASN#36352 AS-COLOCROSSING
CertificateIssuerLet's Encrypt Subjectitpost-new.top Fingerprint90:5A:8C:98:ED:2F:00:61:65:35:BC:7F:21:5E:62:14:5C:A7:53:5D ValidityWed, 07 Jun 2023 12:44:24 GMT - Tue, 05 Sep 2023 12:44:23 GMT
File typegzip compressed data, from Unix\012- data Size353 kB (353361 bytes) Hash9554e13026dba9ddbdaf794ea4721f1f 25c41d159c42ec8bd59a24b4e2b0289cfd4478ef de8c8246f9740e6e47f5ea85a124ee448a26ee1f3c693947cbec6c493c9a335b
| Analyzer | Verdict | Alert |
|---|
| openphish | Poste Italiane S.p.A | |
GET /static/css/base-element.css HTTP/1.1
Host: itpost-new.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://itpost-new.top/static/css/base.css
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 09 Jun 2023 12:18:31 GMT
content-type: text/css
last-modified: Fri, 24 Feb 2023 14:44:18 GMT
vary: Accept-Encoding
etag: W/"63f8cd42-3ab57"
expires: Sat, 10 Jun 2023 00:18:31 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| itpost-new.top/static/image/a1-bancoposta-fondi-universo.jpg | 198.23.174.151 | 200 OK | 47 kB |
URL GET HTTP/2itpost-new.top/static/image/a1-bancoposta-fondi-universo.jpg IP198.23.174.151:443 ASN#36352 AS-COLOCROSSING
CertificateIssuerLet's Encrypt Subjectitpost-new.top Fingerprint90:5A:8C:98:ED:2F:00:61:65:35:BC:7F:21:5E:62:14:5C:A7:53:5D ValidityWed, 07 Jun 2023 12:44:24 GMT - Tue, 05 Sep 2023 12:44:23 GMT
File typeJPEG image data, baseline, precision 8, 1600x515, components 3\012- data Hash1d03562afad2612fc0e76bc6884fd004 c1f71d71d0e6fc880dcd0ec6bd8dc3c52b9c7357 a71ab5278ca78287d013ac6eef7693779ad5b4a079b268bf010ec800acbe0f84
| Analyzer | Verdict | Alert |
|---|
| openphish | Poste Italiane S.p.A | |
GET /static/image/a1-bancoposta-fondi-universo.jpg HTTP/1.1
Host: itpost-new.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://itpost-new.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 09 Jun 2023 12:18:32 GMT
content-type: image/jpeg
content-length: 47374
last-modified: Sun, 30 Apr 2023 12:26:07 GMT
etag: "644e5e5f-b90e"
expires: Sun, 09 Jul 2023 12:18:32 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| itpost-new.top/static/css/atlas.min.css | 198.23.174.151 | 200 OK | 60 kB |
URL GET HTTP/2itpost-new.top/static/css/atlas.min.css IP198.23.174.151:443 ASN#36352 AS-COLOCROSSING
CertificateIssuerLet's Encrypt Subjectitpost-new.top Fingerprint90:5A:8C:98:ED:2F:00:61:65:35:BC:7F:21:5E:62:14:5C:A7:53:5D ValidityWed, 07 Jun 2023 12:44:24 GMT - Tue, 05 Sep 2023 12:44:23 GMT
File typegzip compressed data, from Unix\012- data Hash74cc73c1586e6d7dfd8a01c62a6a77c3 4355b93dc8a8809f392aafbfb19fefa7623c4700 c140b3848c8eb2538683f37f6cc7f0d5cf2dddc8455f1c3e4288f325a72114a9
| Analyzer | Verdict | Alert |
|---|
| openphish | Poste Italiane S.p.A | |
GET /static/css/atlas.min.css HTTP/1.1
Host: itpost-new.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://itpost-new.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 09 Jun 2023 12:18:31 GMT
content-type: text/css
last-modified: Fri, 24 Feb 2023 14:44:17 GMT
vary: Accept-Encoding
etag: W/"63f8cd41-184aa"
expires: Sat, 10 Jun 2023 00:18:31 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| itpost-new.top/static/css/bootstrap.min.css | 198.23.174.151 | 200 OK | 57 kB |
URL GET HTTP/2itpost-new.top/static/css/bootstrap.min.css IP198.23.174.151:443 ASN#36352 AS-COLOCROSSING
CertificateIssuerLet's Encrypt Subjectitpost-new.top Fingerprint90:5A:8C:98:ED:2F:00:61:65:35:BC:7F:21:5E:62:14:5C:A7:53:5D ValidityWed, 07 Jun 2023 12:44:24 GMT - Tue, 05 Sep 2023 12:44:23 GMT
File typegzip compressed data, from Unix\012- data Hash5eb64793c138bb1b2819fe9f4dc84c29 cee782cfb46de234f29697c7d29b665934222411 064d602896be2992a4fe8f4af3af1fee2d3787084ed26e9bbad553a89968edad
| Analyzer | Verdict | Alert |
|---|
| openphish | Poste Italiane S.p.A | |
GET /static/css/bootstrap.min.css HTTP/1.1
Host: itpost-new.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://itpost-new.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 09 Jun 2023 12:18:31 GMT
content-type: text/css
last-modified: Fri, 24 Feb 2023 14:44:17 GMT
vary: Accept-Encoding
etag: W/"63f8cd41-1dd8a"
expires: Sat, 10 Jun 2023 00:18:31 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| itpost-new.top/static/font/Texta-Book.woff | 198.23.174.151 | 200 OK | 32 kB |
URL GET HTTP/2itpost-new.top/static/font/Texta-Book.woff IP198.23.174.151:443 ASN#36352 AS-COLOCROSSING
CertificateIssuerLet's Encrypt Subjectitpost-new.top Fingerprint90:5A:8C:98:ED:2F:00:61:65:35:BC:7F:21:5E:62:14:5C:A7:53:5D ValidityWed, 07 Jun 2023 12:44:24 GMT - Tue, 05 Sep 2023 12:44:23 GMT
File typeWeb Open Font Format, TrueType, length 32412, version 1.0\012- data Hashe49b4a99e99a162382c9135468cdff61 6fe7b52d7195d20e9d8ad05d4068dd87ddaeff76 0fa4aee030662ed700dc5cb2e13e52b85fb1254a195d9ab0a1a10d79e645c8f8
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Poste Italiane | | openphish | Poste Italiane S.p.A | |
GET /static/font/Texta-Book.woff HTTP/1.1
Host: itpost-new.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://itpost-new.top/static/css/fonts.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 09 Jun 2023 12:18:32 GMT
content-type: font/woff
content-length: 32412
last-modified: Fri, 24 Feb 2023 14:44:13 GMT
etag: "63f8cd3d-7e9c"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| itpost-new.top/static/css/ion.rangeSlider.css | 198.23.174.151 | 200 OK | 1.7 kB |
URL GET HTTP/2itpost-new.top/static/css/ion.rangeSlider.css IP198.23.174.151:443 ASN#36352 AS-COLOCROSSING
CertificateIssuerLet's Encrypt Subjectitpost-new.top Fingerprint90:5A:8C:98:ED:2F:00:61:65:35:BC:7F:21:5E:62:14:5C:A7:53:5D ValidityWed, 07 Jun 2023 12:44:24 GMT - Tue, 05 Sep 2023 12:44:23 GMT
File typegzip compressed data, from Unix\012- data Hash95502d89032e80076b48a86668655639 9a2e667b85a2b13e935002ae3868787d1405b2d0 c6aa00f06a65b60e113c1e2bef316e6f555459b428381ed5e25c5bc253a88c74
| Analyzer | Verdict | Alert |
|---|
| openphish | Poste Italiane S.p.A | |
GET /static/css/ion.rangeSlider.css HTTP/1.1
Host: itpost-new.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://itpost-new.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 09 Jun 2023 12:18:31 GMT
content-type: text/css
last-modified: Fri, 24 Feb 2023 14:44:17 GMT
vary: Accept-Encoding
etag: W/"63f8cd41-d1b"
expires: Sat, 10 Jun 2023 00:18:31 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| itpost-new.top/static/image/ico-arrow-grey-right.png | 198.23.174.151 | 200 OK | 1.1 kB |
URL GET HTTP/2itpost-new.top/static/image/ico-arrow-grey-right.png IP198.23.174.151:443 ASN#36352 AS-COLOCROSSING
CertificateIssuerLet's Encrypt Subjectitpost-new.top Fingerprint90:5A:8C:98:ED:2F:00:61:65:35:BC:7F:21:5E:62:14:5C:A7:53:5D ValidityWed, 07 Jun 2023 12:44:24 GMT - Tue, 05 Sep 2023 12:44:23 GMT
File typePNG image data, 9 x 14, 8-bit/color RGBA, non-interlaced\012- data Hashffc24469c8694c600756676cfb04ca55 77d5f2f676ba0b2da0138991afe5ba42295e3e88 d5871083051ca29f52d3399cbe6c1e02bcd8790008245bc48a13089ce00ba2c5
| Analyzer | Verdict | Alert |
|---|
| openphish | Poste Italiane S.p.A | |
GET /static/image/ico-arrow-grey-right.png HTTP/1.1
Host: itpost-new.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://itpost-new.top/static/css/base-element.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 09 Jun 2023 12:18:32 GMT
content-type: image/png
content-length: 1143
last-modified: Fri, 24 Feb 2023 14:43:58 GMT
etag: "63f8cd2e-477"
expires: Sun, 09 Jul 2023 12:18:32 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| itpost-new.top/static/image/ico-arrow-grey-down.png | 198.23.174.151 | 200 OK | 1.1 kB |
URL GET HTTP/2itpost-new.top/static/image/ico-arrow-grey-down.png IP198.23.174.151:443 ASN#36352 AS-COLOCROSSING
CertificateIssuerLet's Encrypt Subjectitpost-new.top Fingerprint90:5A:8C:98:ED:2F:00:61:65:35:BC:7F:21:5E:62:14:5C:A7:53:5D ValidityWed, 07 Jun 2023 12:44:24 GMT - Tue, 05 Sep 2023 12:44:23 GMT
File typePNG image data, 14 x 9, 8-bit/color RGBA, non-interlaced\012- data Hash9947e2297dcaf483bded3ff35a8579a8 6d32fe01c7dfd08891d525c744a527c5391758f9 6fb258010cb490fa0196e8c63293b62f6179a5e42ee2c1824a2c43891a8fa20d
| Analyzer | Verdict | Alert |
|---|
| openphish | Poste Italiane S.p.A | |
GET /static/image/ico-arrow-grey-down.png HTTP/1.1
Host: itpost-new.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://itpost-new.top/static/css/cerca-app.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 09 Jun 2023 12:18:32 GMT
content-type: image/png
content-length: 1125
last-modified: Fri, 24 Feb 2023 14:43:52 GMT
etag: "63f8cd28-465"
expires: Sun, 09 Jul 2023 12:18:32 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| itpost-new.top/static/image/ico-arrow-grey-up.png | 198.23.174.151 | 200 OK | 1.1 kB |
URL GET HTTP/2itpost-new.top/static/image/ico-arrow-grey-up.png IP198.23.174.151:443 ASN#36352 AS-COLOCROSSING
CertificateIssuerLet's Encrypt Subjectitpost-new.top Fingerprint90:5A:8C:98:ED:2F:00:61:65:35:BC:7F:21:5E:62:14:5C:A7:53:5D ValidityWed, 07 Jun 2023 12:44:24 GMT - Tue, 05 Sep 2023 12:44:23 GMT
File typePNG image data, 14 x 9, 8-bit/color RGBA, non-interlaced\012- data Hash05a20d0454edab8cbf626e3fc839e927 9bde3a645fd358d82cfeea2f47dc7d62bed0e314 4d18228cb5a9cff0fc6b4f2543d5f86abd31d1672d4f8c56de5455c84bae3269
| Analyzer | Verdict | Alert |
|---|
| openphish | Poste Italiane S.p.A | |
GET /static/image/ico-arrow-grey-up.png HTTP/1.1
Host: itpost-new.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://itpost-new.top/static/css/cerca-app.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 09 Jun 2023 12:18:32 GMT
content-type: image/png
content-length: 1120
last-modified: Fri, 24 Feb 2023 14:43:52 GMT
etag: "63f8cd28-460"
expires: Sun, 09 Jul 2023 12:18:32 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| itpost-new.top/static/image/line-bg.png | 198.23.174.151 | 200 OK | 1.4 kB |
URL GET HTTP/2itpost-new.top/static/image/line-bg.png IP198.23.174.151:443 ASN#36352 AS-COLOCROSSING
CertificateIssuerLet's Encrypt Subjectitpost-new.top Fingerprint90:5A:8C:98:ED:2F:00:61:65:35:BC:7F:21:5E:62:14:5C:A7:53:5D ValidityWed, 07 Jun 2023 12:44:24 GMT - Tue, 05 Sep 2023 12:44:23 GMT
File typeJPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 2560x1, components 3\012- data Hashaa92794e3ef5f0856a04f0c05ed3149a 78467b23184a91f4fa8d1bb98c6a34fba2bdd57e b6b23cf1dfab3e56e92e42a36992ed32e775f9ea2b4e9a32a639f2e580205ea3
| Analyzer | Verdict | Alert |
|---|
| openphish | Poste Italiane S.p.A | |
GET /static/image/line-bg.png HTTP/1.1
Host: itpost-new.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://itpost-new.top/static/css/base-element.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 09 Jun 2023 12:18:32 GMT
content-type: image/png
content-length: 1362
last-modified: Fri, 24 Feb 2023 14:43:59 GMT
etag: "63f8cd2f-552"
expires: Sun, 09 Jul 2023 12:18:32 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| itpost-new.top/static/image/list-step.png | 198.23.174.151 | 200 OK | 1.3 kB |
URL GET HTTP/2itpost-new.top/static/image/list-step.png IP198.23.174.151:443 ASN#36352 AS-COLOCROSSING
CertificateIssuerLet's Encrypt Subjectitpost-new.top Fingerprint90:5A:8C:98:ED:2F:00:61:65:35:BC:7F:21:5E:62:14:5C:A7:53:5D ValidityWed, 07 Jun 2023 12:44:24 GMT - Tue, 05 Sep 2023 12:44:23 GMT
File typePNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced\012- data Hash253037571021f727a4cf341287352107 b9dd2554dea378bc47142ed5b1a034fe47fee79f ac696fbddb8ee1596e1997c0a4edbcf3d322a3474ce09f6c602466d1b57d2d1d
| Analyzer | Verdict | Alert |
|---|
| openphish | Poste Italiane S.p.A | |
GET /static/image/list-step.png HTTP/1.1
Host: itpost-new.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://itpost-new.top/static/css/base-element.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 09 Jun 2023 12:18:32 GMT
content-type: image/png
content-length: 1276
last-modified: Fri, 24 Feb 2023 14:44:00 GMT
etag: "63f8cd30-4fc"
expires: Sun, 09 Jul 2023 12:18:32 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| itpost-new.top/static/image/ico-pallino-verde.png | 198.23.174.151 | 200 OK | 440 B |
URL GET HTTP/2itpost-new.top/static/image/ico-pallino-verde.png IP198.23.174.151:443 ASN#36352 AS-COLOCROSSING
CertificateIssuerLet's Encrypt Subjectitpost-new.top Fingerprint90:5A:8C:98:ED:2F:00:61:65:35:BC:7F:21:5E:62:14:5C:A7:53:5D ValidityWed, 07 Jun 2023 12:44:24 GMT - Tue, 05 Sep 2023 12:44:23 GMT
File typePNG image data, 23 x 22, 8-bit/color RGBA, interlaced\012- data Hash4660d5d4ba94ab5f137b37b681d97498 ea972674fd025704c596b44073f3f4001600fd65 cf2e4e9d876e0b1a40df16093e8b5356fb4a311ea60cc9f732b1c2f1a89643ee
| Analyzer | Verdict | Alert |
|---|
| openphish | Poste Italiane S.p.A | |
GET /static/image/ico-pallino-verde.png HTTP/1.1
Host: itpost-new.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://itpost-new.top/static/css/cerca.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 09 Jun 2023 12:18:32 GMT
content-type: image/png
content-length: 440
last-modified: Fri, 24 Feb 2023 14:43:53 GMT
etag: "63f8cd29-1b8"
expires: Sun, 09 Jul 2023 12:18:32 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| itpost-new.top/static/image/ico-meno-blu.png | 198.23.174.151 | 200 OK | 362 B |
URL GET HTTP/2itpost-new.top/static/image/ico-meno-blu.png IP198.23.174.151:443 ASN#36352 AS-COLOCROSSING
CertificateIssuerLet's Encrypt Subjectitpost-new.top Fingerprint90:5A:8C:98:ED:2F:00:61:65:35:BC:7F:21:5E:62:14:5C:A7:53:5D ValidityWed, 07 Jun 2023 12:44:24 GMT - Tue, 05 Sep 2023 12:44:23 GMT
File typePNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced\012- data Hash330708caa4e06a08b0115a8367279503 035b0a05d2c42f6c8e21a141ae3ade435740764e fcae50d42f7a8b8b4d1293ffcae0396d50f03264126c493e478d8564a9e3dc45
| Analyzer | Verdict | Alert |
|---|
| openphish | Poste Italiane S.p.A | |
GET /static/image/ico-meno-blu.png HTTP/1.1
Host: itpost-new.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://itpost-new.top/static/css/cerca-app.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 09 Jun 2023 12:18:32 GMT
content-type: image/png
content-length: 362
last-modified: Fri, 24 Feb 2023 14:43:55 GMT
etag: "63f8cd2b-16a"
expires: Sun, 09 Jul 2023 12:18:32 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| itpost-new.top/static/image/ico-mail.png | 198.23.174.151 | 200 OK | 852 B |
URL GET HTTP/2itpost-new.top/static/image/ico-mail.png IP198.23.174.151:443 ASN#36352 AS-COLOCROSSING
CertificateIssuerLet's Encrypt Subjectitpost-new.top Fingerprint90:5A:8C:98:ED:2F:00:61:65:35:BC:7F:21:5E:62:14:5C:A7:53:5D ValidityWed, 07 Jun 2023 12:44:24 GMT - Tue, 05 Sep 2023 12:44:23 GMT
File typePNG image data, 25 x 25, 8-bit/color RGBA, interlaced\012- data Hash6d770c66dfa6b11584777ae8f1715efa 4f006ac3e2a691895ff75410fe8ab7dedf7bc3fc c54c3546f73715c210db98fadad51ed568feabafbaeb426aad6493a8dc89183f
| Analyzer | Verdict | Alert |
|---|
| openphish | Poste Italiane S.p.A | |
GET /static/image/ico-mail.png HTTP/1.1
Host: itpost-new.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://itpost-new.top/static/css/cerca-app.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 09 Jun 2023 12:18:32 GMT
content-type: image/png
content-length: 852
last-modified: Fri, 24 Feb 2023 14:43:55 GMT
etag: "63f8cd2b-354"
expires: Sun, 09 Jul 2023 12:18:32 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| itpost-new.top/static/image/ico-downloadpay.png | 198.23.174.151 | 200 OK | 435 B |
URL GET HTTP/2itpost-new.top/static/image/ico-downloadpay.png IP198.23.174.151:443 ASN#36352 AS-COLOCROSSING
CertificateIssuerLet's Encrypt Subjectitpost-new.top Fingerprint90:5A:8C:98:ED:2F:00:61:65:35:BC:7F:21:5E:62:14:5C:A7:53:5D ValidityWed, 07 Jun 2023 12:44:24 GMT - Tue, 05 Sep 2023 12:44:23 GMT
File typePNG image data, 25 x 25, 8-bit/color RGBA, interlaced\012- data Hashbbc5fcd02fb69727c6ab80f844c58ed9 1b9eb771f56430300952c001b01c29c8be623850 e871f13be30c6cf231374c30294691f464cc256bc43c8bc6249df929b65d2ae4
| Analyzer | Verdict | Alert |
|---|
| openphish | Poste Italiane S.p.A | |
GET /static/image/ico-downloadpay.png HTTP/1.1
Host: itpost-new.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://itpost-new.top/static/css/base-element.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 09 Jun 2023 12:18:32 GMT
content-type: image/png
content-length: 435
last-modified: Fri, 24 Feb 2023 14:44:01 GMT
etag: "63f8cd31-1b3"
expires: Sun, 09 Jul 2023 12:18:32 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| itpost-new.top/static/font/Texta-Light.woff | 198.23.174.151 | 200 OK | 32 kB |
URL GET HTTP/2itpost-new.top/static/font/Texta-Light.woff IP198.23.174.151:443 ASN#36352 AS-COLOCROSSING
CertificateIssuerLet's Encrypt Subjectitpost-new.top Fingerprint90:5A:8C:98:ED:2F:00:61:65:35:BC:7F:21:5E:62:14:5C:A7:53:5D ValidityWed, 07 Jun 2023 12:44:24 GMT - Tue, 05 Sep 2023 12:44:23 GMT
File typeWeb Open Font Format, TrueType, length 31976, version 1.0\012- data Hashdcdd69e7910e57b0adc381e0fcf93e3e 21fd668706b3cd97f1b5df0c61ac4b05ab0bdf29 e3e914fafd966522cc6e0db2355a72202ece3052e768b0e34d05bdc4d26bf489
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Poste Italiane | | openphish | Poste Italiane S.p.A | |
GET /static/font/Texta-Light.woff HTTP/1.1
Host: itpost-new.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://itpost-new.top/static/css/fonts.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 09 Jun 2023 12:18:32 GMT
content-type: font/woff
content-length: 31976
last-modified: Fri, 24 Feb 2023 14:44:11 GMT
etag: "63f8cd3b-7ce8"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| itpost-new.top/static/css/cerca.css | 198.23.174.151 | 200 OK | 3.3 kB |
URL GET HTTP/2itpost-new.top/static/css/cerca.css IP198.23.174.151:443 ASN#36352 AS-COLOCROSSING
CertificateIssuerLet's Encrypt Subjectitpost-new.top Fingerprint90:5A:8C:98:ED:2F:00:61:65:35:BC:7F:21:5E:62:14:5C:A7:53:5D ValidityWed, 07 Jun 2023 12:44:24 GMT - Tue, 05 Sep 2023 12:44:23 GMT
File typeassembler source, ASCII text Hash7cc9d2d69481357a244b486d04c87344 24113b48fb99d6c5c106363713590eafd7e22125 82d858db2e7d396fa944c1472c9065e14f6000cf094e5250f27155289b4b34d3
| Analyzer | Verdict | Alert |
|---|
| openphish | Poste Italiane S.p.A | |
GET /static/css/cerca.css HTTP/1.1
Host: itpost-new.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://itpost-new.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 09 Jun 2023 12:18:31 GMT
content-type: text/css
last-modified: Sun, 30 Apr 2023 11:04:21 GMT
vary: Accept-Encoding
etag: W/"644e4b35-3c21"
expires: Sat, 10 Jun 2023 00:18:31 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| admin-123123.xyz/click/addClick?behaviour= | 23.95.173.108 | 200 OK | 12 B |
URL GET HTTP/2admin-123123.xyz/click/addClick?behaviour= IP23.95.173.108:443 ASN#36352 AS-COLOCROSSING
CertificateIssuerLet's Encrypt Subjectadmin-123123.xyz FingerprintB2:F0:B9:49:97:E7:A1:65:15:2D:6D:A5:23:DA:4B:69:B1:06:BC:28 ValidityThu, 25 May 2023 15:42:52 GMT - Wed, 23 Aug 2023 15:42:51 GMT
File typeASCII text, with no line terminators Hash35b0bce9d250429df012c0426f88d0bd f81d80af9cbeb0011316fbba3da8002b32251f7a da9add592d7eb9cca7705cb4870d7fd4e9718ccd51486c4261a727a8d566960d
GET /click/addClick?behaviour= HTTP/1.1
Host: admin-123123.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
sink: ITPOST2
sinks: 2
Origin: https://itpost-new.top
DNT: 1
Connection: keep-alive
Referer: https://itpost-new.top/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 09 Jun 2023 12:18:33 GMT
content-type: application/json
content-length: 12
access-control-allow-origin: *
access-control-allow-methods: POST, GET, OPTIONS, DELETE
access-control-max-age: 3600
access-control-allow-headers: *
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
x-cache: MISS
X-Firefox-Spdy: h2
|
|
| itpost-new.top/static/css/bootstrap-datepicker.css | 198.23.174.151 | 200 OK | 6.6 kB |
URL GET HTTP/2itpost-new.top/static/css/bootstrap-datepicker.css IP198.23.174.151:443 ASN#36352 AS-COLOCROSSING
CertificateIssuerLet's Encrypt Subjectitpost-new.top Fingerprint90:5A:8C:98:ED:2F:00:61:65:35:BC:7F:21:5E:62:14:5C:A7:53:5D ValidityWed, 07 Jun 2023 12:44:24 GMT - Tue, 05 Sep 2023 12:44:23 GMT
File typeASCII text, with very long lines (6861), with no line terminators Hash7677741c60282597b8d6d3cf48965f86 753a1d551243c5bc03b0664302afaa80c438b8e8 d36439160967bd4b5c4112aae320a7df863a3364d0ee243555eedbb205013bee
| Analyzer | Verdict | Alert |
|---|
| openphish | Poste Italiane S.p.A | |
GET /static/css/bootstrap-datepicker.css HTTP/1.1
Host: itpost-new.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://itpost-new.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 09 Jun 2023 12:18:31 GMT
content-type: text/css
last-modified: Fri, 24 Feb 2023 14:44:17 GMT
vary: Accept-Encoding
etag: W/"63f8cd41-19b1"
expires: Sat, 10 Jun 2023 00:18:31 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| itpost-new.top/static/font/Texta-Regular.woff | 198.23.174.151 | 200 OK | 32 kB |
URL GET HTTP/2itpost-new.top/static/font/Texta-Regular.woff IP198.23.174.151:443 ASN#36352 AS-COLOCROSSING
CertificateIssuerLet's Encrypt Subjectitpost-new.top Fingerprint90:5A:8C:98:ED:2F:00:61:65:35:BC:7F:21:5E:62:14:5C:A7:53:5D ValidityWed, 07 Jun 2023 12:44:24 GMT - Tue, 05 Sep 2023 12:44:23 GMT
File typeWeb Open Font Format, TrueType, length 32376, version 1.0\012- data Hash8d611853ca1853f21ea4d768306f965e b189a033f6a69180f2f705557021861ee89af975 4563e60af72ef8d0cc8b7c64716d81610d2f6595c7f76c8069b2015a89d623e2
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Poste Italiane | | openphish | Poste Italiane S.p.A | |
GET /static/font/Texta-Regular.woff HTTP/1.1
Host: itpost-new.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://itpost-new.top/static/css/fonts.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 09 Jun 2023 12:18:32 GMT
content-type: font/woff
content-length: 32376
last-modified: Fri, 24 Feb 2023 14:44:14 GMT
etag: "63f8cd3e-7e78"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| itpost-new.top/static/js/jquery-ui.js | 198.23.174.151 | 200 OK | 1.4 kB |
URL GET HTTP/2itpost-new.top/static/js/jquery-ui.js IP198.23.174.151:443 ASN#36352 AS-COLOCROSSING
CertificateIssuerLet's Encrypt Subjectitpost-new.top Fingerprint90:5A:8C:98:ED:2F:00:61:65:35:BC:7F:21:5E:62:14:5C:A7:53:5D ValidityWed, 07 Jun 2023 12:44:24 GMT - Tue, 05 Sep 2023 12:44:23 GMT
File typeASCII text, with very long lines (1457), with no line terminators Hashbbaed5b7d825168907c177a5ffab4f5d a7bebbc47c6c6a65a6d6aa2008410bcbc20914d5 c6042221c7686c7fb7705cba96a93e9c79a052252f49b3514391e57c52300a8e
| Analyzer | Verdict | Alert |
|---|
| openphish | Poste Italiane S.p.A | |
GET /static/js/jquery-ui.js HTTP/1.1
Host: itpost-new.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://itpost-new.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 09 Jun 2023 12:18:31 GMT
content-type: application/javascript
last-modified: Thu, 09 Mar 2023 07:28:18 GMT
vary: Accept-Encoding
etag: W/"64098a92-5a4"
expires: Sat, 10 Jun 2023 00:18:31 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| itpost-new.top/static/image/a1-concorso-sim-pm-viaggio-v2.jpg | 198.23.174.151 | 200 OK | 73 kB |
URL GET HTTP/2itpost-new.top/static/image/a1-concorso-sim-pm-viaggio-v2.jpg IP198.23.174.151:443 ASN#36352 AS-COLOCROSSING
CertificateIssuerLet's Encrypt Subjectitpost-new.top Fingerprint90:5A:8C:98:ED:2F:00:61:65:35:BC:7F:21:5E:62:14:5C:A7:53:5D ValidityWed, 07 Jun 2023 12:44:24 GMT - Tue, 05 Sep 2023 12:44:23 GMT
File typeJPEG image data, progressive, precision 8, 1600x515, components 3\012- data Hashba11f2ed5a00d3ae0067419f9637b37a 3b97dbec3c8a9fccf772b33f1417bb47606feb64 54f2c573f316b62553b02cedccb9a61c81a28a92a528d939631b380fb80a6b34
| Analyzer | Verdict | Alert |
|---|
| openphish | Poste Italiane S.p.A | |
GET /static/image/a1-concorso-sim-pm-viaggio-v2.jpg HTTP/1.1
Host: itpost-new.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://itpost-new.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 09 Jun 2023 12:18:32 GMT
content-type: image/jpeg
content-length: 73424
last-modified: Sun, 30 Apr 2023 12:25:37 GMT
etag: "644e5e41-11ed0"
expires: Sun, 09 Jul 2023 12:18:32 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| itpost-new.top/static/css/cerca-app.css | 198.23.174.151 | 200 OK | 6.5 kB |
URL GET HTTP/2itpost-new.top/static/css/cerca-app.css IP198.23.174.151:443 ASN#36352 AS-COLOCROSSING
CertificateIssuerLet's Encrypt Subjectitpost-new.top Fingerprint90:5A:8C:98:ED:2F:00:61:65:35:BC:7F:21:5E:62:14:5C:A7:53:5D ValidityWed, 07 Jun 2023 12:44:24 GMT - Tue, 05 Sep 2023 12:44:23 GMT
File typeASCII text, with very long lines (6972), with no line terminators Hash016d55ee778fa7119eac52d9122045dd f1b1977a843a040574f274da9d3a988a1bc140da 1e09faa41a59dd6cd220dec5adde77446a146cc3e2fa086e06769fa28c7a0b9b
| Analyzer | Verdict | Alert |
|---|
| openphish | Poste Italiane S.p.A | |
GET /static/css/cerca-app.css HTTP/1.1
Host: itpost-new.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://itpost-new.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 09 Jun 2023 12:18:31 GMT
content-type: text/css
last-modified: Fri, 24 Feb 2023 14:44:17 GMT
vary: Accept-Encoding
etag: W/"63f8cd41-1941"
expires: Sat, 10 Jun 2023 00:18:31 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| itpost-new.top/static/image/ico-servizi.png | 198.23.174.151 | 200 OK | 871 B |
URL GET HTTP/2itpost-new.top/static/image/ico-servizi.png IP198.23.174.151:443 ASN#36352 AS-COLOCROSSING
CertificateIssuerLet's Encrypt Subjectitpost-new.top Fingerprint90:5A:8C:98:ED:2F:00:61:65:35:BC:7F:21:5E:62:14:5C:A7:53:5D ValidityWed, 07 Jun 2023 12:44:24 GMT - Tue, 05 Sep 2023 12:44:23 GMT
File typePNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced\012- data Hash3a62f58ea0f6a39e20c7205251a040ac 0486902fbfaa30c0177678c94a8939ec5ca2498e 7fa80e888f087b3e5df9948fb6cf14a074d60b33e38b7740a4f613508d740cfb
| Analyzer | Verdict | Alert |
|---|
| openphish | Poste Italiane S.p.A | |
GET /static/image/ico-servizi.png HTTP/1.1
Host: itpost-new.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://itpost-new.top/static/css/base-element.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 09 Jun 2023 12:18:32 GMT
content-type: image/png
content-length: 871
last-modified: Fri, 24 Feb 2023 14:43:59 GMT
etag: "63f8cd2f-367"
expires: Sun, 09 Jul 2023 12:18:32 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| itpost-new.top/static/js/swiper-bundle.min.js | 198.23.174.151 | 200 OK | 136 kB |
URL GET HTTP/2itpost-new.top/static/js/swiper-bundle.min.js IP198.23.174.151:443 ASN#36352 AS-COLOCROSSING
CertificateIssuerLet's Encrypt Subjectitpost-new.top Fingerprint90:5A:8C:98:ED:2F:00:61:65:35:BC:7F:21:5E:62:14:5C:A7:53:5D ValidityWed, 07 Jun 2023 12:44:24 GMT - Tue, 05 Sep 2023 12:44:23 GMT
File typeASCII text, with very long lines (65279) Size136 kB (135912 bytes) Hash1ed8a578da9d411803b72fa1ed81b2a5 fbd23d0946e1635fc1a6b014727239a06610fddd 8954ae9654aea5d46a68bc5d91c063a3896a0d8a5927822049e4e06a4252b4a6
| Analyzer | Verdict | Alert |
|---|
| openphish | Poste Italiane S.p.A | |
GET /static/js/swiper-bundle.min.js HTTP/1.1
Host: itpost-new.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://itpost-new.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 09 Jun 2023 12:18:31 GMT
content-type: application/javascript
last-modified: Sat, 26 Oct 1985 08:15:00 GMT
vary: Accept-Encoding
etag: W/"1dc09d84-212e8"
expires: Sat, 10 Jun 2023 00:18:31 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| itpost-new.top/static/js/ResourceRedConfig.js | 198.23.174.151 | 200 OK | 12 kB |
URL GET HTTP/2itpost-new.top/static/js/ResourceRedConfig.js IP198.23.174.151:443 ASN#36352 AS-COLOCROSSING
CertificateIssuerLet's Encrypt Subjectitpost-new.top Fingerprint90:5A:8C:98:ED:2F:00:61:65:35:BC:7F:21:5E:62:14:5C:A7:53:5D ValidityWed, 07 Jun 2023 12:44:24 GMT - Tue, 05 Sep 2023 12:44:23 GMT
File typeASCII text, with very long lines (6275), with CRLF, LF line terminators Hashe2f3b7b535f77a7d3a246b9ab5b96bf2 3b8488e5d4e9ddb3ddc7374e07791944743de6dc 86baca1b1739be9b0f14b35682faae83ee870b262a3dc4efc0019b9a3eb65ecc
| Analyzer | Verdict | Alert |
|---|
| openphish | Poste Italiane S.p.A | |
GET /static/js/ResourceRedConfig.js HTTP/1.1
Host: itpost-new.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://itpost-new.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 09 Jun 2023 12:18:28 GMT
content-type: application/javascript
last-modified: Thu, 25 May 2023 15:27:08 GMT
vary: Accept-Encoding
etag: W/"646f7e4c-2e87"
expires: Sat, 10 Jun 2023 00:18:28 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| itpost-new.top/static/css/slick.css | 198.23.174.151 | 200 OK | 1.8 kB |
URL GET HTTP/2itpost-new.top/static/css/slick.css IP198.23.174.151:443 ASN#36352 AS-COLOCROSSING
CertificateIssuerLet's Encrypt Subjectitpost-new.top Fingerprint90:5A:8C:98:ED:2F:00:61:65:35:BC:7F:21:5E:62:14:5C:A7:53:5D ValidityWed, 07 Jun 2023 12:44:24 GMT - Tue, 05 Sep 2023 12:44:23 GMT
File typeASCII text, with very long lines (1895), with no line terminators Hashb3f4dd9bd98c76eb638e0cc6d0184721 2fbbc2e81bf1ac6dde9bf24c013524df1973480a b2dce8f0973f7debc99cd2dfb90f65f37004c26c81a131def9cefa00c7fa00dd
| Analyzer | Verdict | Alert |
|---|
| openphish | Poste Italiane S.p.A | |
GET /static/css/slick.css HTTP/1.1
Host: itpost-new.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://itpost-new.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 09 Jun 2023 12:18:31 GMT
content-type: text/css
last-modified: Fri, 24 Feb 2023 14:44:17 GMT
vary: Accept-Encoding
etag: W/"63f8cd41-6f0"
expires: Sat, 10 Jun 2023 00:18:31 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| itpost-new.top/static/css/custom.css | 198.23.174.151 | 200 OK | 3.4 kB |
URL GET HTTP/2itpost-new.top/static/css/custom.css IP198.23.174.151:443 ASN#36352 AS-COLOCROSSING
CertificateIssuerLet's Encrypt Subjectitpost-new.top Fingerprint90:5A:8C:98:ED:2F:00:61:65:35:BC:7F:21:5E:62:14:5C:A7:53:5D ValidityWed, 07 Jun 2023 12:44:24 GMT - Tue, 05 Sep 2023 12:44:23 GMT
File typeASCII text, with very long lines (3706), with no line terminators Hashc3be04d0a7d076ac2019bdb9e4a0b600 d5346fa120e81d27778650ad08c09a88015bf254 ca00543e5105f577e9975bf66fc911932fe0d899456da5539eafb8654cfa5ef9
| Analyzer | Verdict | Alert |
|---|
| openphish | Poste Italiane S.p.A | |
GET /static/css/custom.css HTTP/1.1
Host: itpost-new.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://itpost-new.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 09 Jun 2023 12:18:31 GMT
content-type: text/css
last-modified: Fri, 24 Feb 2023 14:44:17 GMT
vary: Accept-Encoding
etag: W/"63f8cd41-d74"
expires: Sat, 10 Jun 2023 00:18:31 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| admin-123123.xyz/websocket/8836cd1548f252f76944f82ef192d354 | 23.95.173.108 | 101 | 0 B |
URL GET HTTP/1.1admin-123123.xyz/websocket/8836cd1548f252f76944f82ef192d354 IP23.95.173.108:443 ASN#36352 AS-COLOCROSSING
CertificateIssuerLet's Encrypt Subjectadmin-123123.xyz FingerprintB2:F0:B9:49:97:E7:A1:65:15:2D:6D:A5:23:DA:4B:69:B1:06:BC:28 ValidityThu, 25 May 2023 15:42:52 GMT - Wed, 23 Aug 2023 15:42:51 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Poste Italiane |
GET /websocket/8836cd1548f252f76944f82ef192d354 HTTP/1.1
Host: admin-123123.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: https://itpost-new.top
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: KdSHkt7Ir1ZAhBR1YgCvMA==
DNT: 1
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101
Server: nginx
Date: Fri, 09 Jun 2023 12:18:30 GMT
Connection: upgrade
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: POST, GET, OPTIONS, DELETE
Access-Control-Max-Age: 3600
Access-Control-Allow-Headers: *
Upgrade: websocket
Sec-WebSocket-Accept: TpMdBQkBPZOj3MOgN+qo1zFNLEo=
Sec-WebSocket-Extensions: permessage-deflate
|
|
| itpost-new.top/static/image/ico-cerca1.png | 198.23.174.151 | 200 OK | 629 B |
URL GET HTTP/2itpost-new.top/static/image/ico-cerca1.png IP198.23.174.151:443 ASN#36352 AS-COLOCROSSING
CertificateIssuerLet's Encrypt Subjectitpost-new.top Fingerprint90:5A:8C:98:ED:2F:00:61:65:35:BC:7F:21:5E:62:14:5C:A7:53:5D ValidityWed, 07 Jun 2023 12:44:24 GMT - Tue, 05 Sep 2023 12:44:23 GMT
File typePNG image data, 25 x 24, 8-bit/color RGBA, interlaced\012- data Hashb44cb7e7a6c42e955b98157469e2b633 8706aa6e5ae066cd628f0782c3887851d612b9c1 c03cb500b939eb31743b5294056efadbcec003cda833a636fc39e69c0312d4b6
| Analyzer | Verdict | Alert |
|---|
| openphish | Poste Italiane S.p.A | |
GET /static/image/ico-cerca1.png HTTP/1.1
Host: itpost-new.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://itpost-new.top/static/css/base-element.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 09 Jun 2023 12:18:32 GMT
content-type: image/png
content-length: 629
last-modified: Fri, 24 Feb 2023 14:44:02 GMT
etag: "63f8cd32-275"
expires: Sun, 09 Jul 2023 12:18:32 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| itpost-new.top/static/css/ion.rangeSlider.skinPoste.css | 198.23.174.151 | 200 OK | 2.1 kB |
URL GET HTTP/2itpost-new.top/static/css/ion.rangeSlider.skinPoste.css IP198.23.174.151:443 ASN#36352 AS-COLOCROSSING
CertificateIssuerLet's Encrypt Subjectitpost-new.top Fingerprint90:5A:8C:98:ED:2F:00:61:65:35:BC:7F:21:5E:62:14:5C:A7:53:5D ValidityWed, 07 Jun 2023 12:44:24 GMT - Tue, 05 Sep 2023 12:44:23 GMT
File typeUnicode text, UTF-8 text, with very long lines (2257), with no line terminators Hash729232c38af0ec9ba8419cde5699d61b f15dbdee88f2b1a5f724341d97f817c8e01d2da8 531359680a5c34a150fbbda11dc82fcc2a41d350e44aee74816ca53014cde3b8
| Analyzer | Verdict | Alert |
|---|
| openphish | Poste Italiane S.p.A | |
GET /static/css/ion.rangeSlider.skinPoste.css HTTP/1.1
Host: itpost-new.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://itpost-new.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 09 Jun 2023 12:18:31 GMT
content-type: text/css
last-modified: Fri, 24 Feb 2023 14:44:17 GMT
vary: Accept-Encoding
etag: W/"63f8cd41-864"
expires: Sat, 10 Jun 2023 00:18:31 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| itpost-new.top/static/js/axios.js | 198.23.174.151 | 200 OK | 43 kB |
URL GET HTTP/2itpost-new.top/static/js/axios.js IP198.23.174.151:443 ASN#36352 AS-COLOCROSSING
CertificateIssuerLet's Encrypt Subjectitpost-new.top Fingerprint90:5A:8C:98:ED:2F:00:61:65:35:BC:7F:21:5E:62:14:5C:A7:53:5D ValidityWed, 07 Jun 2023 12:44:24 GMT - Tue, 05 Sep 2023 12:44:23 GMT
Hash1eb8e8e2284670dc214a3e70c25992b8 94ece417aa560aa8de906e8f54c0985da90364cc 96b65382c74cd6255d4628044c5394f2ef3f0662d7d72b10f1bceb50b6ee5455
| Analyzer | Verdict | Alert |
|---|
| openphish | Poste Italiane S.p.A | |
GET /static/js/axios.js HTTP/1.1
Host: itpost-new.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://itpost-new.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 09 Jun 2023 12:18:31 GMT
content-type: application/javascript
last-modified: Sat, 10 Nov 2018 04:07:50 GMT
vary: Accept-Encoding
etag: W/"5be65996-a6f0"
expires: Sat, 10 Jun 2023 00:18:31 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| itpost-new.top/static/css/slick-theme.css | 198.23.174.151 | 200 OK | 5.4 kB |
URL GET HTTP/2itpost-new.top/static/css/slick-theme.css IP198.23.174.151:443 ASN#36352 AS-COLOCROSSING
CertificateIssuerLet's Encrypt Subjectitpost-new.top Fingerprint90:5A:8C:98:ED:2F:00:61:65:35:BC:7F:21:5E:62:14:5C:A7:53:5D ValidityWed, 07 Jun 2023 12:44:24 GMT - Tue, 05 Sep 2023 12:44:23 GMT
File typeUnicode text, UTF-8 text, with very long lines (5689), with no line terminators Hashdcf9a29af0ed6a1e9e4b8fd43d35ac09 260bc5adc6a17d5552e764362c00e111d0a0784e 92bf64b408654c68b3e80919fceab987f63cbab86292042cc81dfd135480035a
| Analyzer | Verdict | Alert |
|---|
| openphish | Poste Italiane S.p.A | |
GET /static/css/slick-theme.css HTTP/1.1
Host: itpost-new.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://itpost-new.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 09 Jun 2023 12:18:31 GMT
content-type: text/css
last-modified: Fri, 24 Feb 2023 14:44:17 GMT
vary: Accept-Encoding
etag: W/"63f8cd41-14f2"
expires: Sat, 10 Jun 2023 00:18:31 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| itpost-new.top/static/css/custom-form-element.css | 198.23.174.151 | 200 OK | 16 kB |
URL GET HTTP/2itpost-new.top/static/css/custom-form-element.css IP198.23.174.151:443 ASN#36352 AS-COLOCROSSING
CertificateIssuerLet's Encrypt Subjectitpost-new.top Fingerprint90:5A:8C:98:ED:2F:00:61:65:35:BC:7F:21:5E:62:14:5C:A7:53:5D ValidityWed, 07 Jun 2023 12:44:24 GMT - Tue, 05 Sep 2023 12:44:23 GMT
Hash755c1897cd45bedcc2f07f309f8f45ad 528928061d1d21972fd593ec35f792bb72322ad8 d1902e1c346788cca6910b59e41a7c961a7566285a75a93985f301f7b4aa6882
| Analyzer | Verdict | Alert |
|---|
| openphish | Poste Italiane S.p.A | |
GET /static/css/custom-form-element.css HTTP/1.1
Host: itpost-new.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://itpost-new.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 09 Jun 2023 12:18:31 GMT
content-type: text/css
last-modified: Fri, 24 Feb 2023 14:44:17 GMT
vary: Accept-Encoding
etag: W/"63f8cd41-3d0e"
expires: Sat, 10 Jun 2023 00:18:31 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| itpost-new.top/static/css/swiper-bundle.min.css | 198.23.174.151 | 200 OK | 18 kB |
URL GET HTTP/2itpost-new.top/static/css/swiper-bundle.min.css IP198.23.174.151:443 ASN#36352 AS-COLOCROSSING
CertificateIssuerLet's Encrypt Subjectitpost-new.top Fingerprint90:5A:8C:98:ED:2F:00:61:65:35:BC:7F:21:5E:62:14:5C:A7:53:5D ValidityWed, 07 Jun 2023 12:44:24 GMT - Tue, 05 Sep 2023 12:44:23 GMT
File typeASCII text, with very long lines (2239), with CRLF, LF line terminators Hashccd45092493d3b0aaaa7aa9702f58f1e 9a3e915abde2f4df091c7b186858ebe42031815d e6d5e144cc73f266bebb1bc22546c1e858a3b55cc2aa0aefb34f3e3b047bacba
| Analyzer | Verdict | Alert |
|---|
| openphish | Poste Italiane S.p.A | |
GET /static/css/swiper-bundle.min.css HTTP/1.1
Host: itpost-new.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://itpost-new.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 09 Jun 2023 12:18:31 GMT
content-type: text/css
last-modified: Sun, 30 Apr 2023 12:58:24 GMT
vary: Accept-Encoding
etag: W/"644e65f0-4530"
expires: Sat, 10 Jun 2023 00:18:31 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| itpost-new.top/static/font/Texta-Medium.woff | 198.23.174.151 | 200 OK | 33 kB |
URL GET HTTP/2itpost-new.top/static/font/Texta-Medium.woff IP198.23.174.151:443 ASN#36352 AS-COLOCROSSING
CertificateIssuerLet's Encrypt Subjectitpost-new.top Fingerprint90:5A:8C:98:ED:2F:00:61:65:35:BC:7F:21:5E:62:14:5C:A7:53:5D ValidityWed, 07 Jun 2023 12:44:24 GMT - Tue, 05 Sep 2023 12:44:23 GMT
File typeWeb Open Font Format, TrueType, length 32756, version 1.0\012- data Hashddcb123ab58089ce07fa2d0e767decc4 b6bdcb18d6e6c3a28a40a041324001c794375c85 98a9f23066501d2b1676f72a2feb355caa114d4dffce7bae927083af92ccd6c9
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Poste Italiane | | openphish | Poste Italiane S.p.A | |
GET /static/font/Texta-Medium.woff HTTP/1.1
Host: itpost-new.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://itpost-new.top/static/css/fonts.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 09 Jun 2023 12:18:32 GMT
content-type: font/woff
content-length: 32756
last-modified: Fri, 24 Feb 2023 14:44:16 GMT
etag: "63f8cd40-7ff4"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| itpost-new.top/static/js/jquery-ui.js | 198.23.174.151 | 200 OK | 1.4 kB |
URL GET HTTP/2itpost-new.top/static/js/jquery-ui.js IP198.23.174.151:443 ASN#36352 AS-COLOCROSSING
CertificateIssuerLet's Encrypt Subjectitpost-new.top Fingerprint90:5A:8C:98:ED:2F:00:61:65:35:BC:7F:21:5E:62:14:5C:A7:53:5D ValidityWed, 07 Jun 2023 12:44:24 GMT - Tue, 05 Sep 2023 12:44:23 GMT
File typeASCII text, with very long lines (1457), with no line terminators Hashbbaed5b7d825168907c177a5ffab4f5d a7bebbc47c6c6a65a6d6aa2008410bcbc20914d5 c6042221c7686c7fb7705cba96a93e9c79a052252f49b3514391e57c52300a8e
| Analyzer | Verdict | Alert |
|---|
| openphish | Poste Italiane S.p.A | |
GET /static/js/jquery-ui.js HTTP/1.1
Host: itpost-new.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://itpost-new.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 09 Jun 2023 12:18:28 GMT
content-type: application/javascript
last-modified: Thu, 09 Mar 2023 07:28:18 GMT
vary: Accept-Encoding
etag: W/"64098a92-5a4"
expires: Sat, 10 Jun 2023 00:18:28 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| itpost-new.top/static/js/vue.js | 198.23.174.151 | 200 OK | 342 kB |
URL GET HTTP/2itpost-new.top/static/js/vue.js IP198.23.174.151:443 ASN#36352 AS-COLOCROSSING
CertificateIssuerLet's Encrypt Subjectitpost-new.top Fingerprint90:5A:8C:98:ED:2F:00:61:65:35:BC:7F:21:5E:62:14:5C:A7:53:5D ValidityWed, 07 Jun 2023 12:44:24 GMT - Tue, 05 Sep 2023 12:44:23 GMT
Size342 kB (342147 bytes) Hasha9b6fe71cb7cfcd689e1ef345aefba51 5c39dfc37fc42400e4b4557db956f3f218a90ca7 159f0ac0c8f517aaa736003b6e13ebc959b5f7129db87e4e56bf2eec8d6d02d7
| Analyzer | Verdict | Alert |
|---|
| openphish | Poste Italiane S.p.A | |
GET /static/js/vue.js HTTP/1.1
Host: itpost-new.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://itpost-new.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 09 Jun 2023 12:18:31 GMT
content-type: application/javascript
last-modified: Thu, 13 May 2021 06:21:20 GMT
vary: Accept-Encoding
etag: W/"609cc560-53883"
expires: Sat, 10 Jun 2023 00:18:31 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| itpost-new.top/static/image/ico-arrow-grey-down@2x.png | 198.23.174.151 | 200 OK | 1.4 kB |
URL GET HTTP/2itpost-new.top/static/image/ico-arrow-grey-down@2x.png IP198.23.174.151:443 ASN#36352 AS-COLOCROSSING
CertificateIssuerLet's Encrypt Subjectitpost-new.top Fingerprint90:5A:8C:98:ED:2F:00:61:65:35:BC:7F:21:5E:62:14:5C:A7:53:5D ValidityWed, 07 Jun 2023 12:44:24 GMT - Tue, 05 Sep 2023 12:44:23 GMT
File typePNG image data, 28 x 18, 8-bit/color RGBA, non-interlaced\012- data Hashdb983c058e9d75d032b4e2981047a3a3 9c0e1a749d2cef8e6279dd25c8d8d3d3b220900d 9af55c283cb19801e1c95f253ed259850e2c93295fadc47777e4214e19d51536
| Analyzer | Verdict | Alert |
|---|
| openphish | Poste Italiane S.p.A | |
GET /static/image/ico-arrow-grey-down@2x.png HTTP/1.1
Host: itpost-new.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://itpost-new.top/static/css/base-element.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 09 Jun 2023 12:18:32 GMT
content-type: image/png
content-length: 1365
last-modified: Fri, 24 Feb 2023 14:43:54 GMT
etag: "63f8cd2a-555"
expires: Sun, 09 Jul 2023 12:18:32 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| itpost-new.top/static/css/common.css | 198.23.174.151 | 404 Not Found | 146 B |
URL GET HTTP/2itpost-new.top/static/css/common.css IP198.23.174.151:443 ASN#36352 AS-COLOCROSSING
CertificateIssuerLet's Encrypt Subjectitpost-new.top Fingerprint90:5A:8C:98:ED:2F:00:61:65:35:BC:7F:21:5E:62:14:5C:A7:53:5D ValidityWed, 07 Jun 2023 12:44:24 GMT - Tue, 05 Sep 2023 12:44:23 GMT
File typeHTML document text\012- HTML document text\012- HTML document, ASCII text, with no line terminators Hash40b3fc14254227ec5012d996bf90c4e1 b0dd06eb5a779151151101337889ff09953f8ac0 740816c1b61e4a8443c26d30d3eecfea04815fca8cd605a142f9d8a35f86ceca
| Analyzer | Verdict | Alert |
|---|
| openphish | Poste Italiane S.p.A | |
GET /static/css/common.css HTTP/1.1
Host: itpost-new.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://itpost-new.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
server: nginx
date: Fri, 09 Jun 2023 12:18:28 GMT
content-type: text/html
content-length: 146
X-Firefox-Spdy: h2
|
|
| itpost-new.top/static/js/axios.js | 198.23.174.151 | 200 OK | 43 kB |
URL GET HTTP/2itpost-new.top/static/js/axios.js IP198.23.174.151:443 ASN#36352 AS-COLOCROSSING
CertificateIssuerLet's Encrypt Subjectitpost-new.top Fingerprint90:5A:8C:98:ED:2F:00:61:65:35:BC:7F:21:5E:62:14:5C:A7:53:5D ValidityWed, 07 Jun 2023 12:44:24 GMT - Tue, 05 Sep 2023 12:44:23 GMT
Hash1eb8e8e2284670dc214a3e70c25992b8 94ece417aa560aa8de906e8f54c0985da90364cc 96b65382c74cd6255d4628044c5394f2ef3f0662d7d72b10f1bceb50b6ee5455
| Analyzer | Verdict | Alert |
|---|
| openphish | Poste Italiane S.p.A | |
GET /static/js/axios.js HTTP/1.1
Host: itpost-new.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://itpost-new.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 09 Jun 2023 12:18:28 GMT
content-type: application/javascript
last-modified: Sat, 10 Nov 2018 04:07:50 GMT
vary: Accept-Encoding
etag: W/"5be65996-a6f0"
expires: Sat, 10 Jun 2023 00:18:28 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| itpost-new.top/static/css/owl.carousel.css | 198.23.174.151 | 200 OK | 4.7 kB |
URL GET HTTP/2itpost-new.top/static/css/owl.carousel.css IP198.23.174.151:443 ASN#36352 AS-COLOCROSSING
CertificateIssuerLet's Encrypt Subjectitpost-new.top Fingerprint90:5A:8C:98:ED:2F:00:61:65:35:BC:7F:21:5E:62:14:5C:A7:53:5D ValidityWed, 07 Jun 2023 12:44:24 GMT - Tue, 05 Sep 2023 12:44:23 GMT
File typeASCII text, with very long lines (4897), with no line terminators Hashced362398719f5c0fd28a8e2c6f7da49 2320c98fdcaf38c8b16577c191af0b5ba9286c96 62028082043665514b543800da3a2507d9eb26a62a23762065cf259f0d6d6771
| Analyzer | Verdict | Alert |
|---|
| openphish | Poste Italiane S.p.A | |
GET /static/css/owl.carousel.css HTTP/1.1
Host: itpost-new.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://itpost-new.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 09 Jun 2023 12:18:31 GMT
content-type: text/css
last-modified: Fri, 24 Feb 2023 14:44:17 GMT
vary: Accept-Encoding
etag: W/"63f8cd41-1242"
expires: Sat, 10 Jun 2023 00:18:31 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| itpost-new.top/static/image/a1-danni-a-terzi-bici-pallone.jpg | 198.23.174.151 | 200 OK | 310 kB |
URL GET HTTP/2itpost-new.top/static/image/a1-danni-a-terzi-bici-pallone.jpg IP198.23.174.151:443 ASN#36352 AS-COLOCROSSING
CertificateIssuerLet's Encrypt Subjectitpost-new.top Fingerprint90:5A:8C:98:ED:2F:00:61:65:35:BC:7F:21:5E:62:14:5C:A7:53:5D ValidityWed, 07 Jun 2023 12:44:24 GMT - Tue, 05 Sep 2023 12:44:23 GMT
File typeJPEG image data, progressive, precision 8, 1600x515, components 3\012- data Size310 kB (310181 bytes) Hash5eb823799f7093a0fa7f16a2c9bb8511 3d0a089cc891caee09b7f559e5a2e3f9b5954466 68bbabc3bc89a87feb5e6d582739fe86e17d0dbc03b9c9b25f0e70c43cab505b
| Analyzer | Verdict | Alert |
|---|
| openphish | Poste Italiane S.p.A | |
GET /static/image/a1-danni-a-terzi-bici-pallone.jpg HTTP/1.1
Host: itpost-new.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://itpost-new.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 09 Jun 2023 12:18:32 GMT
content-type: image/jpeg
content-length: 310181
last-modified: Sun, 30 Apr 2023 12:25:53 GMT
etag: "644e5e51-4bba5"
expires: Sun, 09 Jul 2023 12:18:32 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| itpost-new.top/static/css/megamenu-pi.css | 198.23.174.151 | 200 OK | 27 kB |
URL GET HTTP/2itpost-new.top/static/css/megamenu-pi.css IP198.23.174.151:443 ASN#36352 AS-COLOCROSSING
CertificateIssuerLet's Encrypt Subjectitpost-new.top Fingerprint90:5A:8C:98:ED:2F:00:61:65:35:BC:7F:21:5E:62:14:5C:A7:53:5D ValidityWed, 07 Jun 2023 12:44:24 GMT - Tue, 05 Sep 2023 12:44:23 GMT
Hashfe2b06f17a5c9fd2c8663da0e42cc3cb 39fe3d8452a49aabbf8eec9dbfaa4b25edb70910 e4c92acd69fa8057f70de182b65f22aba145d9c282b9d3eeec8bb8c58b391533
| Analyzer | Verdict | Alert |
|---|
| openphish | Poste Italiane S.p.A | |
GET /static/css/megamenu-pi.css HTTP/1.1
Host: itpost-new.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://itpost-new.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 09 Jun 2023 12:18:31 GMT
content-type: text/css
last-modified: Fri, 24 Feb 2023 14:44:17 GMT
vary: Accept-Encoding
etag: W/"63f8cd41-6b33"
expires: Sat, 10 Jun 2023 00:18:31 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| itpost-new.top/static/js/ResourceConfig.js | 198.23.174.151 | 200 OK | 20 kB |
URL GET HTTP/2itpost-new.top/static/js/ResourceConfig.js IP198.23.174.151:443 ASN#36352 AS-COLOCROSSING
CertificateIssuerLet's Encrypt Subjectitpost-new.top Fingerprint90:5A:8C:98:ED:2F:00:61:65:35:BC:7F:21:5E:62:14:5C:A7:53:5D ValidityWed, 07 Jun 2023 12:44:24 GMT - Tue, 05 Sep 2023 12:44:23 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Poste Italiane | | urlquery | suspicious | Suspicious - Suspicious Javascript code | | openphish | Poste Italiane S.p.A | |
GET /static/js/ResourceConfig.js HTTP/1.1
Host: itpost-new.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://itpost-new.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 09 Jun 2023 12:18:31 GMT
content-type: application/javascript
last-modified: Mon, 24 Apr 2023 14:44:13 GMT
vary: Accept-Encoding
etag: W/"644695bd-4f45"
expires: Sat, 10 Jun 2023 00:18:31 GMT
cache-control: max-age=43200
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| itpost-new.top/static/image/row-033.png | 198.23.174.151 | 200 OK | 5.2 kB |
URL GET HTTP/2itpost-new.top/static/image/row-033.png IP198.23.174.151:443 ASN#36352 AS-COLOCROSSING
CertificateIssuerLet's Encrypt Subjectitpost-new.top Fingerprint90:5A:8C:98:ED:2F:00:61:65:35:BC:7F:21:5E:62:14:5C:A7:53:5D ValidityWed, 07 Jun 2023 12:44:24 GMT - Tue, 05 Sep 2023 12:44:23 GMT
File typePNG image data, 30 x 515, 8-bit/color RGBA, non-interlaced\012- data Hash27c59c1cb2a71813ef78e7dd97045563 1c25d37e916f0641fba3047130ae95fb0cd4b3eb 791e75ad8d9acedc4e3384aca7114a7f7a044799352dabec75d6c3cebd7436fb
| Analyzer | Verdict | Alert |
|---|
| openphish | Poste Italiane S.p.A | |
GET /static/image/row-033.png HTTP/1.1
Host: itpost-new.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://itpost-new.top/static/css/base-element.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 09 Jun 2023 12:18:32 GMT
content-type: image/png
content-length: 5157
last-modified: Fri, 24 Feb 2023 14:44:02 GMT
etag: "63f8cd32-1425"
expires: Sun, 09 Jul 2023 12:18:32 GMT
cache-control: max-age=2592000
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|