Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

1

Static

static

1

63b04d2f29...5.html

windows7-x64

1

63b04d2f29...5.html

windows10-2004-x64

1

Analysis

  • max time kernel
    0s
  • max time network
    125s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    26/12/2023, 09:26 UTC

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    63b04d2f29ec38a7c015be468b38a835.html

  • Size

    62KB

  • MD5

    63b04d2f29ec38a7c015be468b38a835

  • SHA1

    4cf82c8bd7d23f9d23832ce6e34a2c48cde86379

  • SHA256

    972e0cde5c39e97564809395b224ccd95c2f826f3da8ab07d73c9a2ce033a35f

  • SHA512

    b27b5a5f01395fb5fc87efba085faf6e65821e4d37d3376cbbac77d4bc8b206f18f532a1444b44ff189ec2d0d3f4fb610e44c41437aaddd48047d1103f17f912

  • SSDEEP

    768:/USDdjPx5oUJiP/X51gQZPMpbvj23awB9bRAYlQnuSfQAAwn2ejd1d2Sg6K8Ouf9:/hJoUcDHZEpbUv9bRAYlkFjd1AB8Okv1

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 6 IoCs
    adwarespyware
  • Suspicious use of SetWindowsHookEx 2 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\63b04d2f29ec38a7c015be468b38a835.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:868
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:868 CREDAT:17410 /prefetch:2
      2⤵
        PID:2648

    Network

    • flag-us
      DNS
      2.136.104.51.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      2.136.104.51.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      2.181.190.20.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      2.181.190.20.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      2.181.190.20.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      2.181.190.20.in-addr.arpa
      IN PTR
    • flag-us
      DNS
      www.blogger.com
      Remote address:
      8.8.8.8:53
      Request
      www.blogger.com
      IN A
      Response
      www.blogger.com
      IN CNAME
      blogger.l.google.com
      blogger.l.google.com
      IN A
      216.58.212.201
    • flag-us
      DNS
      1.bp.blogspot.com
      Remote address:
      8.8.8.8:53
      Request
      1.bp.blogspot.com
      IN A
      Response
      1.bp.blogspot.com
      IN CNAME
      photos-ugc.l.googleusercontent.com
      photos-ugc.l.googleusercontent.com
      IN A
      142.250.200.33
    • flag-us
      DNS
      resources.blogblog.com
      Remote address:
      8.8.8.8:53
      Request
      resources.blogblog.com
      IN A
      Response
      resources.blogblog.com
      IN CNAME
      blogger.l.google.com
      blogger.l.google.com
      IN A
      216.58.212.201
    • flag-gb
      GET
      http://1.bp.blogspot.com/-QOY6UqBdfQw/UIB4dC3x_PI/AAAAAAAACaE/qvmRJlOrvl4/w72-h72-p-k-no-nu/fettuccine-al-salmone.jpg
      Remote address:
      142.250.200.33:80
      Request
      GET /-QOY6UqBdfQw/UIB4dC3x_PI/AAAAAAAACaE/qvmRJlOrvl4/w72-h72-p-k-no-nu/fettuccine-al-salmone.jpg HTTP/1.1
      Accept: image/png, image/svg+xml, image/jxr, image/*;q=0.8, */*;q=0.5
      Accept-Language: en-US
      User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
      Accept-Encoding: gzip, deflate
      Host: 1.bp.blogspot.com
      Connection: Keep-Alive
      Response
      HTTP/1.1 200 OK
      Content-Type: image/jpeg
      Vary: Origin
      Access-Control-Allow-Origin: *
      Timing-Allow-Origin: *
      Access-Control-Expose-Headers: Content-Length
      ETag: "v9a1"
      Expires: Sun, 07 Jan 2024 08:11:35 GMT
      Cache-Control: public, max-age=86400, no-transform
      Content-Disposition: inline;filename="fettuccine-al-salmone.jpg"
      X-Content-Type-Options: nosniff
      Date: Sat, 06 Jan 2024 08:11:35 GMT
      Server: fife
      Content-Length: 3478
      X-XSS-Protection: 0
    • flag-gb
      GET
      http://1.bp.blogspot.com/-HM0WJBWLd14/TVhGwIJmLKI/AAAAAAAAAGI/xRfpzO9eoKE/s320/Lady+Chef.jpg
      Remote address:
      142.250.200.33:80
      Request
      GET /-HM0WJBWLd14/TVhGwIJmLKI/AAAAAAAAAGI/xRfpzO9eoKE/s320/Lady+Chef.jpg HTTP/1.1
      Accept: image/png, image/svg+xml, image/jxr, image/*;q=0.8, */*;q=0.5
      Accept-Language: en-US
      User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
      Accept-Encoding: gzip, deflate
      Host: 1.bp.blogspot.com
      Connection: Keep-Alive
      Response
      HTTP/1.1 200 OK
      Content-Type: image/jpeg
      Vary: Origin
      Access-Control-Allow-Origin: *
      Timing-Allow-Origin: *
      Access-Control-Expose-Headers: Content-Length
      ETag: "v62"
      Expires: Sun, 07 Jan 2024 08:11:35 GMT
      Cache-Control: public, max-age=86400, no-transform
      Content-Disposition: inline;filename="Lady Chef.jpg"
      X-Content-Type-Options: nosniff
      Date: Sat, 06 Jan 2024 08:11:35 GMT
      Server: fife
      Content-Length: 30169
      X-XSS-Protection: 0
    • flag-us
      DNS
      3.bp.blogspot.com
      Remote address:
      8.8.8.8:53
      Request
      3.bp.blogspot.com
      IN A
      Response
      3.bp.blogspot.com
      IN CNAME
      photos-ugc.l.googleusercontent.com
      photos-ugc.l.googleusercontent.com
      IN A
      142.250.200.33
    • flag-us
      DNS
      lh5.googleusercontent.com
      Remote address:
      8.8.8.8:53
      Request
      lh5.googleusercontent.com
      IN A
      Response
      lh5.googleusercontent.com
      IN CNAME
      googlehosted.l.googleusercontent.com
      googlehosted.l.googleusercontent.com
      IN A
      216.58.212.193
    • flag-us
      DNS
      lh5.googleusercontent.com
      Remote address:
      8.8.8.8:53
      Request
      lh5.googleusercontent.com
      IN A
    • flag-us
      DNS
      4.bp.blogspot.com
      Remote address:
      8.8.8.8:53
      Request
      4.bp.blogspot.com
      IN A
      Response
      4.bp.blogspot.com
      IN CNAME
      photos-ugc.l.googleusercontent.com
      photos-ugc.l.googleusercontent.com
      IN A
      142.250.200.33
    • flag-us
      DNS
      4.bp.blogspot.com
      Remote address:
      8.8.8.8:53
      Request
      4.bp.blogspot.com
      IN A
    • flag-us
      DNS
      lh4.googleusercontent.com
      Remote address:
      8.8.8.8:53
      Request
      lh4.googleusercontent.com
      IN A
      Response
      lh4.googleusercontent.com
      IN CNAME
      googlehosted.l.googleusercontent.com
      googlehosted.l.googleusercontent.com
      IN A
      216.58.212.193
    • flag-us
      DNS
      2.bp.blogspot.com
      Remote address:
      8.8.8.8:53
      Request
      2.bp.blogspot.com
      IN A
      Response
      2.bp.blogspot.com
      IN CNAME
      photos-ugc.l.googleusercontent.com
      photos-ugc.l.googleusercontent.com
      IN A
      142.250.200.33
    • flag-gb
      GET
      http://1.bp.blogspot.com/-rrN-020cfbQ/UIBnTvZaSQI/AAAAAAAACXE/TlZXYAivjZ4/w72-h72-p-k-no-nu/tortasoffice_yogurt.jpg
      Remote address:
      142.250.200.33:80
      Request
      GET /-rrN-020cfbQ/UIBnTvZaSQI/AAAAAAAACXE/TlZXYAivjZ4/w72-h72-p-k-no-nu/tortasoffice_yogurt.jpg HTTP/1.1
      Accept: image/png, image/svg+xml, image/jxr, image/*;q=0.8, */*;q=0.5
      Accept-Language: en-US
      User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
      Accept-Encoding: gzip, deflate
      Host: 1.bp.blogspot.com
      Connection: Keep-Alive
      Response
      HTTP/1.1 200 OK
      Content-Type: image/jpeg
      Vary: Origin
      Access-Control-Allow-Origin: *
      Timing-Allow-Origin: *
      Access-Control-Expose-Headers: Content-Length
      ETag: "v971"
      Expires: Sun, 07 Jan 2024 08:11:35 GMT
      Cache-Control: public, max-age=86400, no-transform
      Content-Disposition: inline;filename="tortasoffice_yogurt.jpg"
      X-Content-Type-Options: nosniff
      Date: Sat, 06 Jan 2024 08:11:35 GMT
      Server: fife
      Content-Length: 4329
      X-XSS-Protection: 0
    • flag-us
      DNS
      cresycaradonna.files.wordpress.com
      Remote address:
      8.8.8.8:53
      Request
      cresycaradonna.files.wordpress.com
      IN A
      Response
      cresycaradonna.files.wordpress.com
      IN CNAME
      s8.files.wordpress.com
      s8.files.wordpress.com
      IN A
      192.0.72.30
      s8.files.wordpress.com
      IN A
      192.0.72.31
    • flag-us
      DNS
      cresycaradonna.files.wordpress.com
      Remote address:
      8.8.8.8:53
      Request
      cresycaradonna.files.wordpress.com
      IN A
    • flag-us
      DNS
      tools.net-parade.it
      Remote address:
      8.8.8.8:53
      Request
      tools.net-parade.it
      IN A
      Response
      tools.net-parade.it
      IN A
      31.11.34.110
    • flag-gb
      GET
      http://pagead2.googlesyndication.com/pagead/show_ads.js
      Remote address:
      142.250.180.2:80
      Request
      GET /pagead/show_ads.js HTTP/1.1
      Accept: application/javascript, */*;q=0.8
      Accept-Language: en-US
      User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
      Accept-Encoding: gzip, deflate
      Host: pagead2.googlesyndication.com
      Connection: Keep-Alive
      Response
      HTTP/1.1 200 OK
      P3P: policyref="http://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
      Timing-Allow-Origin: *
      Cross-Origin-Resource-Policy: cross-origin
      Vary: Accept-Encoding
      Date: Sat, 06 Jan 2024 08:11:34 GMT
      Expires: Sat, 06 Jan 2024 08:11:34 GMT
      Cache-Control: private, max-age=3600
      Content-Type: text/javascript; charset=UTF-8
      ETag: 2510346138947886211
      X-Content-Type-Options: nosniff
      Content-Disposition: attachment; filename="f.txt"
      Content-Encoding: gzip
      Server: cafe
      Content-Length: 14066
      X-XSS-Protection: 0
    • flag-gb
      GET
      http://3.bp.blogspot.com/-hVXr0RFU-Fc/T-BWDuLuOPI/AAAAAAAABzE/fZiZ9FBJHgE/w72-h72-p-k-no-nu/DSC08078.JPG
      Remote address:
      142.250.200.33:80
      Request
      GET /-hVXr0RFU-Fc/T-BWDuLuOPI/AAAAAAAABzE/fZiZ9FBJHgE/w72-h72-p-k-no-nu/DSC08078.JPG HTTP/1.1
      Accept: image/png, image/svg+xml, image/jxr, image/*;q=0.8, */*;q=0.5
      Accept-Language: en-US
      User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
      Accept-Encoding: gzip, deflate
      Host: 3.bp.blogspot.com
      Connection: Keep-Alive
      Response
      HTTP/1.1 200 OK
      Content-Type: image/jpeg
      Vary: Origin
      Access-Control-Allow-Origin: *
      Timing-Allow-Origin: *
      Access-Control-Expose-Headers: Content-Length
      ETag: "v731"
      Expires: Sun, 07 Jan 2024 08:11:35 GMT
      Cache-Control: public, max-age=86400, no-transform
      Content-Disposition: inline;filename="DSC08078.JPG"
      X-Content-Type-Options: nosniff
      Date: Sat, 06 Jan 2024 08:11:35 GMT
      Server: fife
      Content-Length: 3186
      X-XSS-Protection: 0
    • flag-gb
      GET
      http://3.bp.blogspot.com/-eHLjIEwoPmM/UH8z74lgaaI/AAAAAAAACV4/Ud-20FXFwPk/w72-h72-p-k-no-nu/liq.jpg
      Remote address:
      142.250.200.33:80
      Request
      GET /-eHLjIEwoPmM/UH8z74lgaaI/AAAAAAAACV4/Ud-20FXFwPk/w72-h72-p-k-no-nu/liq.jpg HTTP/1.1
      Accept: image/png, image/svg+xml, image/jxr, image/*;q=0.8, */*;q=0.5
      Accept-Language: en-US
      User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
      Accept-Encoding: gzip, deflate
      Host: 3.bp.blogspot.com
      Connection: Keep-Alive
      Response
      HTTP/1.1 200 OK
      Content-Type: image/jpeg
      Vary: Origin
      Access-Control-Allow-Origin: *
      Timing-Allow-Origin: *
      Access-Control-Expose-Headers: Content-Length
      ETag: "v95e"
      Expires: Sun, 07 Jan 2024 08:11:35 GMT
      Cache-Control: public, max-age=86400, no-transform
      Content-Disposition: inline;filename="liq.jpg"
      X-Content-Type-Options: nosniff
      Date: Sat, 06 Jan 2024 08:11:35 GMT
      Server: fife
      Content-Length: 3785
      X-XSS-Protection: 0
    • flag-gb
      GET
      http://2.bp.blogspot.com/-SglWZLO0jdE/UFwBDtuVjeI/AAAAAAAABZA/HWDzK_paALY/w72-h72-p-k-no-nu/tortacappuccino.jpg
      Remote address:
      142.250.200.33:80
      Request
      GET /-SglWZLO0jdE/UFwBDtuVjeI/AAAAAAAABZA/HWDzK_paALY/w72-h72-p-k-no-nu/tortacappuccino.jpg HTTP/1.1
      Accept: image/png, image/svg+xml, image/jxr, image/*;q=0.8, */*;q=0.5
      Accept-Language: en-US
      User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
      Accept-Encoding: gzip, deflate
      Host: 2.bp.blogspot.com
      Connection: Keep-Alive
      Response
      HTTP/1.1 200 OK
      Content-Type: image/jpeg
      Vary: Origin
      Access-Control-Allow-Origin: *
      Timing-Allow-Origin: *
      Access-Control-Expose-Headers: Content-Length
      ETag: "v590"
      Expires: Sun, 07 Jan 2024 08:11:35 GMT
      Cache-Control: public, max-age=86400, no-transform
      Content-Disposition: inline;filename="tortacappuccino.jpg"
      X-Content-Type-Options: nosniff
      Date: Sat, 06 Jan 2024 08:11:35 GMT
      Server: fife
      Content-Length: 4515
      X-XSS-Protection: 0
    • flag-gb
      GET
      http://2.bp.blogspot.com/-V1Ec6Q27OJg/UFgQdhMJshI/AAAAAAAABQE/mRYY3qCzsBM/w72-h72-p-k-no-nu/piatto-pronto-tovaglia-giallo-paletta-per-dolci_dettaglio_ricette_slider_grande3.jpg
      Remote address:
      142.250.200.33:80
      Request
      GET /-V1Ec6Q27OJg/UFgQdhMJshI/AAAAAAAABQE/mRYY3qCzsBM/w72-h72-p-k-no-nu/piatto-pronto-tovaglia-giallo-paletta-per-dolci_dettaglio_ricette_slider_grande3.jpg HTTP/1.1
      Accept: image/png, image/svg+xml, image/jxr, image/*;q=0.8, */*;q=0.5
      Accept-Language: en-US
      User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
      Accept-Encoding: gzip, deflate
      Host: 2.bp.blogspot.com
      Connection: Keep-Alive
      Response
      HTTP/1.1 200 OK
      Content-Type: image/jpeg
      Vary: Origin
      Access-Control-Allow-Origin: *
      Timing-Allow-Origin: *
      Access-Control-Expose-Headers: Content-Length
      ETag: "v501"
      Expires: Sun, 07 Jan 2024 08:11:35 GMT
      Cache-Control: public, max-age=86400, no-transform
      Content-Disposition: inline;filename="piatto-pronto-tovaglia-giallo-paletta-per-dolci_dettaglio_ricette_slider_grande3.jpg"
      X-Content-Type-Options: nosniff
      Date: Sat, 06 Jan 2024 08:11:35 GMT
      Server: fife
      Content-Length: 4437
      X-XSS-Protection: 0
    • flag-gb
      GET
      http://2.bp.blogspot.com/-2tEB1tXzD0c/UIRbZXa69qI/AAAAAAAACgQ/zb6dWCYvimY/w72-h72-p-k-no-nu/torta-croccante-al-latte.jpg
      Remote address:
      142.250.200.33:80
      Request
      GET /-2tEB1tXzD0c/UIRbZXa69qI/AAAAAAAACgQ/zb6dWCYvimY/w72-h72-p-k-no-nu/torta-croccante-al-latte.jpg HTTP/1.1
      Accept: image/png, image/svg+xml, image/jxr, image/*;q=0.8, */*;q=0.5
      Accept-Language: en-US
      User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
      Accept-Encoding: gzip, deflate
      Host: 2.bp.blogspot.com
      Connection: Keep-Alive
      Response
      HTTP/1.1 200 OK
      Content-Type: image/jpeg
      Vary: Origin
      Access-Control-Allow-Origin: *
      Timing-Allow-Origin: *
      Access-Control-Expose-Headers: Content-Length
      ETag: "va04"
      Expires: Sun, 07 Jan 2024 08:11:35 GMT
      Cache-Control: public, max-age=86400, no-transform
      Content-Disposition: inline;filename="torta-croccante-al-latte.jpg"
      X-Content-Type-Options: nosniff
      Date: Sat, 06 Jan 2024 08:11:35 GMT
      Server: fife
      Content-Length: 5144
      X-XSS-Protection: 0
    • flag-it
      GET
      http://tools.net-parade.it/images/b180_verde.png
      Remote address:
      31.11.34.110:80
      Request
      GET /images/b180_verde.png HTTP/1.1
      Accept: image/png, image/svg+xml, image/jxr, image/*;q=0.8, */*;q=0.5
      Accept-Language: en-US
      User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
      Accept-Encoding: gzip, deflate
      Host: tools.net-parade.it
      Connection: Keep-Alive
      Response
      HTTP/1.1 301 Moved Permanently
      Keep-Alive: timeout=3, max=993
      Content-Type: text/html; charset=UTF-8
      Location: https://tools.net-parade.it/images/b180_verde.png
      Server: Microsoft-IIS/8.5
      Date: Sat, 06 Jan 2024 08:11:35 GMT
      Content-Length: 172
    • flag-us
      DNS
      95.221.229.192.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      95.221.229.192.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      33.200.250.142.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      33.200.250.142.in-addr.arpa
      IN PTR
      Response
      33.200.250.142.in-addr.arpa
      IN PTR
      lhr48s30-in-f11e100net
    • flag-us
      DNS
      201.212.58.216.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      201.212.58.216.in-addr.arpa
      IN PTR
      Response
      201.212.58.216.in-addr.arpa
      IN PTR
      ams16s21-in-f91e100net
      201.212.58.216.in-addr.arpa
      IN PTR
      ams16s21-in-f201�H
      201.212.58.216.in-addr.arpa
      IN PTR
      lhr25s27-in-f9�H
    • flag-us
      DNS
      2.180.250.142.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      2.180.250.142.in-addr.arpa
      IN PTR
      Response
      2.180.250.142.in-addr.arpa
      IN PTR
      lhr25s32-in-f21e100net
    • flag-us
      DNS
      110.34.11.31.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      110.34.11.31.in-addr.arpa
      IN PTR
      Response
      110.34.11.31.in-addr.arpa
      IN PTR
      websn3s100arubait
    • flag-us
      DNS
      193.212.58.216.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      193.212.58.216.in-addr.arpa
      IN PTR
      Response
      193.212.58.216.in-addr.arpa
      IN PTR
      lhr25s27-in-f11e100net
      193.212.58.216.in-addr.arpa
      IN PTR
      ams16s21-in-f193�H
      193.212.58.216.in-addr.arpa
      IN PTR
      ams16s21-in-f1�H
    • flag-gb
      GET
      http://4.bp.blogspot.com/-WB-cCPEmlaA/UL8OwEX808I/AAAAAAAAFTU/lNCTHMt4cU0/w72-h72-p-k-no-nu/tronchetto-di-natale-5.jpg
      Remote address:
      142.250.200.33:80
      Request
      GET /-WB-cCPEmlaA/UL8OwEX808I/AAAAAAAAFTU/lNCTHMt4cU0/w72-h72-p-k-no-nu/tronchetto-di-natale-5.jpg HTTP/1.1
      Accept: image/png, image/svg+xml, image/jxr, image/*;q=0.8, */*;q=0.5
      Accept-Language: en-US
      User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
      Accept-Encoding: gzip, deflate
      Host: 4.bp.blogspot.com
      Connection: Keep-Alive
      Response
      HTTP/1.1 200 OK
      Content-Type: image/jpeg
      Vary: Origin
      Access-Control-Allow-Origin: *
      Timing-Allow-Origin: *
      Access-Control-Expose-Headers: Content-Length
      ETag: "v1535"
      Expires: Sun, 07 Jan 2024 08:11:37 GMT
      Cache-Control: public, max-age=86400, no-transform
      Content-Disposition: inline;filename="tronchetto-di-natale-5.jpg"
      X-Content-Type-Options: nosniff
      Date: Sat, 06 Jan 2024 08:11:37 GMT
      Server: fife
      Content-Length: 3257
      X-XSS-Protection: 0
    • flag-us
      GET
      http://cresycaradonna.files.wordpress.com/2011/09/tiramisu-fragole-ricetta-monoporzione.jpg
      Remote address:
      192.0.72.30:80
      Request
      GET /2011/09/tiramisu-fragole-ricetta-monoporzione.jpg HTTP/1.1
      Accept: image/png, image/svg+xml, image/jxr, image/*;q=0.8, */*;q=0.5
      Accept-Language: en-US
      User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
      Accept-Encoding: gzip, deflate
      Host: cresycaradonna.files.wordpress.com
      Connection: Keep-Alive
      Response
      HTTP/1.1 301 Moved Permanently
      Server: nginx
      Date: Sat, 06 Jan 2024 08:11:36 GMT
      Content-Type: text/html
      Content-Length: 162
      Connection: keep-alive
      Location: https://cresycaradonna.files.wordpress.com/2011/09/tiramisu-fragole-ricetta-monoporzione.jpg
    • flag-us
      DNS
      3.200.250.142.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      3.200.250.142.in-addr.arpa
      IN PTR
      Response
      3.200.250.142.in-addr.arpa
      IN PTR
      lhr48s29-in-f31e100net
    • flag-us
      DNS
      3.200.250.142.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      3.200.250.142.in-addr.arpa
      IN PTR
    • flag-us
      DNS
      241.154.82.20.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      241.154.82.20.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      55.36.223.20.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      55.36.223.20.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      30.72.0.192.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      30.72.0.192.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      233.38.18.104.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      233.38.18.104.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      s10.histats.com
      Remote address:
      8.8.8.8:53
      Request
      s10.histats.com
      IN A
      Response
      s10.histats.com
      IN CNAME
      s10.histats.com.cdn.cloudflare.net
      s10.histats.com.cdn.cloudflare.net
      IN A
      104.20.79.99
      s10.histats.com.cdn.cloudflare.net
      IN A
      104.20.80.99
    • flag-us
      DNS
      ocsp05.actalis.it
      Remote address:
      8.8.8.8:53
      Request
      ocsp05.actalis.it
      IN A
      Response
      ocsp05.actalis.it
      IN CNAME
      ocsp.actalis.it
      ocsp.actalis.it
      IN A
      109.70.240.130
    • flag-us
      GET
      http://s10.histats.com/js15.js
      Remote address:
      104.20.79.99:80
      Request
      GET /js15.js HTTP/1.1
      Accept: application/javascript, */*;q=0.8
      Accept-Language: en-US
      User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
      Accept-Encoding: gzip, deflate
      Host: s10.histats.com
      Connection: Keep-Alive
      Response
      HTTP/1.1 200 OK
      Date: Sat, 06 Jan 2024 08:11:38 GMT
      Content-Type: text/javascript
      Content-Length: 4405
      Connection: keep-alive
      Content-Encoding: gzip
      ETag: "980881274"
      Last-Modified: Thu, 16 Apr 2020 10:44:16 GMT
      Vary: Accept-Encoding
      Cache-Control: max-age=28800
      CF-Cache-Status: HIT
      Age: 19690
      Accept-Ranges: bytes
      Server: cloudflare
      CF-RAY: 84127dd03f6f79b8-LHR
    • flag-us
      DNS
      www.vedovineri.it
      Remote address:
      8.8.8.8:53
      Request
      www.vedovineri.it
      IN A
      Response
    • flag-us
      DNS
      www.vedovineri.it
      Remote address:
      8.8.8.8:53
      Request
      www.vedovineri.it
      IN A
    • flag-it
      GET
      http://ocsp05.actalis.it/VA/AUTH-ROOT/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSw4x5v4bTlizjNRmTdkYSy7q0R9gQUUtiIOsifeGbtifN7OHCUyQICNtACEBJzd5ejFYht%2FrdsfmpaA1Q%3D
      Remote address:
      109.70.240.130:80
      Request
      GET /VA/AUTH-ROOT/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSw4x5v4bTlizjNRmTdkYSy7q0R9gQUUtiIOsifeGbtifN7OHCUyQICNtACEBJzd5ejFYht%2FrdsfmpaA1Q%3D HTTP/1.1
      Connection: Keep-Alive
      Accept: */*
      User-Agent: Microsoft-CryptoAPI/10.0
      Host: ocsp05.actalis.it
      Response
      HTTP/1.1 200
      Server: nginx/1.18.0 (Ubuntu)
      Date: Sat, 06 Jan 2024 08:11:38 GMT
      Content-Type: application/ocsp-response
      Content-Length: 2055
      Connection: keep-alive
      Last-Modified: Wed, 03 Jan 2024 16:03:17 GMT
      Expires: Mon, 18 Mar 2024 15:36:56 GMT
      ETag: "989213e38f8eb6f91160d7fa81087b4eb56c11c0"
      Cache-Control: max-age=10,public,no-transform,must-revalidate
    • flag-us
      DNS
      fbcdn-sphotos-b-a.akamaihd.net
      Remote address:
      8.8.8.8:53
      Request
      fbcdn-sphotos-b-a.akamaihd.net
      IN A
      Response
      fbcdn-sphotos-b-a.akamaihd.net
      IN CNAME
      fbcdn-sphotos-b-a.akamaihd.net.edgesuite.net
    • flag-us
      DNS
      sphotos-b.ak.fbcdn.net
      Remote address:
      8.8.8.8:53
      Request
      sphotos-b.ak.fbcdn.net
      IN A
      Response
    • flag-us
      DNS
      ocsp06.actalis.it
      Remote address:
      8.8.8.8:53
      Request
      ocsp06.actalis.it
      IN A
      Response
      ocsp06.actalis.it
      IN A
      109.70.240.114
    • flag-it
      GET
      http://ocsp06.actalis.it/VA/AUTHDV-G3/MFEwTzBNMEswSTAJBgUrDgMCGgUABBROJtlvaAzyepGCxfu9qEfsEKGHVgQUQoNtgHwJhGf9gFer8Sb1d8gignECEFmitek5pvL%2BbWFA3KogSzI%3D
      Remote address:
      109.70.240.114:80
      Request
      GET /VA/AUTHDV-G3/MFEwTzBNMEswSTAJBgUrDgMCGgUABBROJtlvaAzyepGCxfu9qEfsEKGHVgQUQoNtgHwJhGf9gFer8Sb1d8gignECEFmitek5pvL%2BbWFA3KogSzI%3D HTTP/1.1
      Connection: Keep-Alive
      Accept: */*
      User-Agent: Microsoft-CryptoAPI/10.0
      Host: ocsp06.actalis.it
      Response
      HTTP/1.1 200
      Server: nginx
      Date: Sat, 06 Jan 2024 08:11:39 GMT
      Content-Type: application/ocsp-response
      Content-Length: 3926
      Connection: keep-alive
      Last-Modified: Sat, 06 Jan 2024 06:27:21 GMT
      Expires: Sun, 07 Jan 2024 06:27:20 GMT
      ETag: "77d1a587dc6fa8f64db4931b719c9e348243f7fb"
      Cache-Control: max-age=10,public,no-transform,must-revalidate
    • flag-us
      DNS
      130.240.70.109.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      130.240.70.109.in-addr.arpa
      IN PTR
      Response
      130.240.70.109.in-addr.arpa
      IN PTR
      h31actalisit
    • flag-us
      DNS
      s4.histats.com
      Remote address:
      8.8.8.8:53
      Request
      s4.histats.com
      IN A
      Response
      s4.histats.com
      IN A
      149.56.240.27
      s4.histats.com
      IN A
      149.56.240.131
      s4.histats.com
      IN A
      54.39.128.117
      s4.histats.com
      IN A
      149.56.240.129
      s4.histats.com
      IN A
      54.39.156.32
      s4.histats.com
      IN A
      149.56.240.127
      s4.histats.com
      IN A
      149.56.240.130
      s4.histats.com
      IN A
      54.39.128.162
      s4.histats.com
      IN A
      142.4.219.198
      s4.histats.com
      IN A
      149.56.240.128
      s4.histats.com
      IN A
      149.56.240.31
      s4.histats.com
      IN A
      158.69.254.144
      s4.histats.com
      IN A
      149.56.240.132
    • flag-us
      DNS
      connect.facebook.net
      Remote address:
      8.8.8.8:53
      Request
      connect.facebook.net
      IN A
      Response
      connect.facebook.net
      IN CNAME
      scontent.xx.fbcdn.net
      scontent.xx.fbcdn.net
      IN A
      163.70.147.23
    • flag-us
      DNS
      connect.facebook.net
      Remote address:
      8.8.8.8:53
      Request
      connect.facebook.net
      IN A
    • flag-us
      DNS
      99.79.20.104.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      99.79.20.104.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      99.79.20.104.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      99.79.20.104.in-addr.arpa
      IN PTR
    • flag-us
      DNS
      27.240.56.149.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      27.240.56.149.in-addr.arpa
      IN PTR
      Response
      27.240.56.149.in-addr.arpa
      IN PTR
      ns534106 ip-149-56-240net
    • flag-us
      DNS
      27.240.56.149.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      27.240.56.149.in-addr.arpa
      IN PTR
      Response
      27.240.56.149.in-addr.arpa
      IN PTR
      ns534106 ip-149-56-240net
    • flag-us
      DNS
      114.240.70.109.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      114.240.70.109.in-addr.arpa
      IN PTR
      Response
      114.240.70.109.in-addr.arpa
      IN PTR
      h15actalisit
    • flag-us
      DNS
      114.240.70.109.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      114.240.70.109.in-addr.arpa
      IN PTR
      Response
      114.240.70.109.in-addr.arpa
      IN PTR
      h15actalisit
    • flag-us
      DNS
      40.13.222.173.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      40.13.222.173.in-addr.arpa
      IN PTR
      Response
      40.13.222.173.in-addr.arpa
      IN PTR
      a173-222-13-40deploystaticakamaitechnologiescom
    • flag-us
      DNS
      40.13.222.173.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      40.13.222.173.in-addr.arpa
      IN PTR
    • flag-us
      DNS
      193.179.17.96.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      193.179.17.96.in-addr.arpa
      IN PTR
      Response
      193.179.17.96.in-addr.arpa
      IN PTR
      a96-17-179-193deploystaticakamaitechnologiescom
    • flag-us
      DNS
      193.179.17.96.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      193.179.17.96.in-addr.arpa
      IN PTR
    • flag-us
      DNS
      connect.facebook.net
      Remote address:
      8.8.8.8:53
      Request
      connect.facebook.net
      IN A
      Response
      connect.facebook.net
      IN CNAME
      scontent.xx.fbcdn.net
      scontent.xx.fbcdn.net
      IN A
      163.70.147.23
    • flag-us
      DNS
      connect.facebook.net
      Remote address:
      8.8.8.8:53
      Request
      connect.facebook.net
      IN A
      Response
      connect.facebook.net
      IN CNAME
      scontent.xx.fbcdn.net
      scontent.xx.fbcdn.net
      IN A
      163.70.147.23
    • flag-us
      DNS
      9.228.82.20.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      9.228.82.20.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      9.228.82.20.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      9.228.82.20.in-addr.arpa
      IN PTR
    • flag-us
      DNS
      googleads.g.doubleclick.net
      Remote address:
      8.8.8.8:53
      Request
      googleads.g.doubleclick.net
      IN A
      Response
      googleads.g.doubleclick.net
      IN A
      172.217.16.226
    • flag-us
      DNS
      googleads.g.doubleclick.net
      Remote address:
      8.8.8.8:53
      Request
      googleads.g.doubleclick.net
      IN A
    • flag-us
      DNS
      animacucina.altervista.org
      Remote address:
      8.8.8.8:53
      Request
      animacucina.altervista.org
      IN A
      Response
    • flag-us
      DNS
      animacucina.altervista.org
      Remote address:
      8.8.8.8:53
      Request
      animacucina.altervista.org
      IN A
    • flag-us
      DNS
      www.facebook.com
      Remote address:
      8.8.8.8:53
      Request
      www.facebook.com
      IN A
      Response
      www.facebook.com
      IN CNAME
      star-mini.c10r.facebook.com
      star-mini.c10r.facebook.com
      IN A
      157.240.221.35
    • flag-us
      DNS
      226.16.217.172.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      226.16.217.172.in-addr.arpa
      IN PTR
      Response
      226.16.217.172.in-addr.arpa
      IN PTR
      lhr48s28-in-f21e100net
      226.16.217.172.in-addr.arpa
      IN PTR
      mad08s04-in-f2�H
    • flag-us
      DNS
      226.16.217.172.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      226.16.217.172.in-addr.arpa
      IN PTR
    • flag-us
      DNS
      35.221.240.157.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      35.221.240.157.in-addr.arpa
      IN PTR
      Response
      35.221.240.157.in-addr.arpa
      IN PTR
      edge-star-mini-shv-01-lhr8facebookcom
    • flag-us
      DNS
      35.221.240.157.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      35.221.240.157.in-addr.arpa
      IN PTR
    • flag-us
      DNS
      tpc.googlesyndication.com
      Remote address:
      8.8.8.8:53
      Request
      tpc.googlesyndication.com
      IN A
      Response
      tpc.googlesyndication.com
      IN A
      142.250.180.1
    • flag-us
      DNS
      tpc.googlesyndication.com
      Remote address:
      8.8.8.8:53
      Request
      tpc.googlesyndication.com
      IN A
    • flag-us
      DNS
      www.google.com
      Remote address:
      8.8.8.8:53
      Request
      www.google.com
      IN A
      Response
      www.google.com
      IN A
      142.250.200.4
    • flag-us
      DNS
      www.google.com
      Remote address:
      8.8.8.8:53
      Request
      www.google.com
      IN A
    • flag-us
      DNS
      1.180.250.142.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      1.180.250.142.in-addr.arpa
      IN PTR
      Response
      1.180.250.142.in-addr.arpa
      IN PTR
      lhr25s32-in-f11e100net
    • flag-us
      DNS
      1.180.250.142.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      1.180.250.142.in-addr.arpa
      IN PTR
    • flag-us
      DNS
      15.164.165.52.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      15.164.165.52.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      15.164.165.52.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      15.164.165.52.in-addr.arpa
      IN PTR
    • flag-us
      DNS
      4.200.250.142.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      4.200.250.142.in-addr.arpa
      IN PTR
      Response
      4.200.250.142.in-addr.arpa
      IN PTR
      lhr48s29-in-f41e100net
    • flag-us
      DNS
      4.200.250.142.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      4.200.250.142.in-addr.arpa
      IN PTR
    • flag-us
      DNS
      161.19.199.152.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      161.19.199.152.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      161.19.199.152.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      161.19.199.152.in-addr.arpa
      IN PTR
    • flag-us
      DNS
      18.134.221.88.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      18.134.221.88.in-addr.arpa
      IN PTR
      Response
      18.134.221.88.in-addr.arpa
      IN PTR
      a88-221-134-18deploystaticakamaitechnologiescom
    • flag-us
      DNS
      18.134.221.88.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      18.134.221.88.in-addr.arpa
      IN PTR
    • flag-us
      DNS
      18.134.221.88.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      18.134.221.88.in-addr.arpa
      IN PTR
    • flag-us
      DNS
      18.134.221.88.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      18.134.221.88.in-addr.arpa
      IN PTR
    • flag-us
      DNS
      173.178.17.96.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      173.178.17.96.in-addr.arpa
      IN PTR
      Response
      173.178.17.96.in-addr.arpa
      IN PTR
      a96-17-178-173deploystaticakamaitechnologiescom
    • flag-us
      DNS
      173.178.17.96.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      173.178.17.96.in-addr.arpa
      IN PTR
    • flag-us
      DNS
      200.197.79.204.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      200.197.79.204.in-addr.arpa
      IN PTR
      Response
      200.197.79.204.in-addr.arpa
      IN PTR
      a-0001a-msedgenet
    • flag-us
      DNS
      200.197.79.204.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      200.197.79.204.in-addr.arpa
      IN PTR
      Response
      200.197.79.204.in-addr.arpa
      IN PTR
      a-0001a-msedgenet
    • flag-us
      DNS
      104.241.123.92.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      104.241.123.92.in-addr.arpa
      IN PTR
      Response
      104.241.123.92.in-addr.arpa
      IN PTR
      a92-123-241-104deploystaticakamaitechnologiescom
    • flag-us
      DNS
      104.241.123.92.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      104.241.123.92.in-addr.arpa
      IN PTR
      Response
      104.241.123.92.in-addr.arpa
      IN PTR
      a92-123-241-104deploystaticakamaitechnologiescom
    • flag-us
      DNS
      119.110.54.20.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      119.110.54.20.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      119.110.54.20.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      119.110.54.20.in-addr.arpa
      IN PTR
      Response
    • flag-us
      DNS
      tse1.mm.bing.net
      Remote address:
      8.8.8.8:53
      Request
      tse1.mm.bing.net
      IN A
      Response
      tse1.mm.bing.net
      IN CNAME
      mm-mm.bing.net.trafficmanager.net
      mm-mm.bing.net.trafficmanager.net
      IN CNAME
      dual-a-0001.a-msedge.net
      dual-a-0001.a-msedge.net
      IN A
      204.79.197.200
      dual-a-0001.a-msedge.net
      IN A
      13.107.21.200
    • flag-us
      DNS
      tse1.mm.bing.net
      Remote address:
      8.8.8.8:53
      Request
      tse1.mm.bing.net
      IN A
      Response
      tse1.mm.bing.net
      IN CNAME
      mm-mm.bing.net.trafficmanager.net
      mm-mm.bing.net.trafficmanager.net
      IN CNAME
      dual-a-0001.a-msedge.net
      dual-a-0001.a-msedge.net
      IN A
      204.79.197.200
      dual-a-0001.a-msedge.net
      IN A
      13.107.21.200
    • flag-us
      DNS
      217.135.221.88.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      217.135.221.88.in-addr.arpa
      IN PTR
      Response
      217.135.221.88.in-addr.arpa
      IN PTR
      a88-221-135-217deploystaticakamaitechnologiescom
    • flag-us
      DNS
      217.135.221.88.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      217.135.221.88.in-addr.arpa
      IN PTR
      Response
      217.135.221.88.in-addr.arpa
      IN PTR
      a88-221-135-217deploystaticakamaitechnologiescom
    • flag-us
      DNS
      176.178.17.96.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      176.178.17.96.in-addr.arpa
      IN PTR
      Response
      176.178.17.96.in-addr.arpa
      IN PTR
      a96-17-178-176deploystaticakamaitechnologiescom
    • flag-us
      DNS
      176.178.17.96.in-addr.arpa
      Remote address:
      8.8.8.8:53
      Request
      176.178.17.96.in-addr.arpa
      IN PTR
    • 142.250.200.33:80
      http://1.bp.blogspot.com/-QOY6UqBdfQw/UIB4dC3x_PI/AAAAAAAACaE/qvmRJlOrvl4/w72-h72-p-k-no-nu/fettuccine-al-salmone.jpg
      http
      1.7kB
       4.3kB
       12
      7

      HTTP Request

      GET http://1.bp.blogspot.com/-QOY6UqBdfQw/UIB4dC3x_PI/AAAAAAAACaE/qvmRJlOrvl4/w72-h72-p-k-no-nu/fettuccine-al-salmone.jpg

      HTTP Response

      200
    • 142.250.200.33:80
      http://1.bp.blogspot.com/-HM0WJBWLd14/TVhGwIJmLKI/AAAAAAAAAGI/xRfpzO9eoKE/s320/Lady+Chef.jpg
      http
      2.5kB
       31.7kB
       32
      27

      HTTP Request

      GET http://1.bp.blogspot.com/-HM0WJBWLd14/TVhGwIJmLKI/AAAAAAAAAGI/xRfpzO9eoKE/s320/Lady+Chef.jpg

      HTTP Response

      200
    • 216.58.212.201:443
      www.blogger.com
      tls
      922 B
       104 B
       7
      2
    • 216.58.212.201:443
      www.blogger.com
      tls
      1.4kB
       5.1kB
       18
      11
    • 142.250.200.33:80
      http://1.bp.blogspot.com/-rrN-020cfbQ/UIBnTvZaSQI/AAAAAAAACXE/TlZXYAivjZ4/w72-h72-p-k-no-nu/tortasoffice_yogurt.jpg
      http
      827 B
       5.1kB
       10
      7

      HTTP Request

      GET http://1.bp.blogspot.com/-rrN-020cfbQ/UIBnTvZaSQI/AAAAAAAACXE/TlZXYAivjZ4/w72-h72-p-k-no-nu/tortasoffice_yogurt.jpg

      HTTP Response

      200
    • 216.58.212.201:443
      resources.blogblog.com
      tls
      2.7kB
       6.2kB
       25
      14
    • 216.58.212.201:443
      resources.blogblog.com
      tls
      1.6kB
       5.1kB
       17
      9
    • 216.58.212.201:443
      www.blogger.com
      tls
      10.3kB
       209.9kB
       177
      166
    • 142.250.180.2:80
      pagead2.googlesyndication.com
      328 B
       132 B
       7
      3
    • 142.250.180.2:80
      http://pagead2.googlesyndication.com/pagead/show_ads.js
      http
      1.1kB
       15.2kB
       17
      14

      HTTP Request

      GET http://pagead2.googlesyndication.com/pagead/show_ads.js

      HTTP Response

      200
    • 142.250.200.33:80
      http://3.bp.blogspot.com/-hVXr0RFU-Fc/T-BWDuLuOPI/AAAAAAAABzE/fZiZ9FBJHgE/w72-h72-p-k-no-nu/DSC08078.JPG
      http
      822 B
       4.8kB
       10
      7

      HTTP Request

      GET http://3.bp.blogspot.com/-hVXr0RFU-Fc/T-BWDuLuOPI/AAAAAAAABzE/fZiZ9FBJHgE/w72-h72-p-k-no-nu/DSC08078.JPG

      HTTP Response

      200
    • 142.250.200.33:80
      http://3.bp.blogspot.com/-eHLjIEwoPmM/UH8z74lgaaI/AAAAAAAACV4/Ud-20FXFwPk/w72-h72-p-k-no-nu/liq.jpg
      http
      811 B
       4.5kB
       10
      7

      HTTP Request

      GET http://3.bp.blogspot.com/-eHLjIEwoPmM/UH8z74lgaaI/AAAAAAAACV4/Ud-20FXFwPk/w72-h72-p-k-no-nu/liq.jpg

      HTTP Response

      200
    • 216.58.212.193:443
      lh4.googleusercontent.com
      tls
      2.8kB
       17.9kB
       34
      28
    • 216.58.212.193:443
      lh4.googleusercontent.com
      tls
      1.3kB
       10.8kB
       20
      15
    • 142.250.200.33:80
      http://2.bp.blogspot.com/-SglWZLO0jdE/UFwBDtuVjeI/AAAAAAAABZA/HWDzK_paALY/w72-h72-p-k-no-nu/tortacappuccino.jpg
      http
      823 B
       5.3kB
       10
      7

      HTTP Request

      GET http://2.bp.blogspot.com/-SglWZLO0jdE/UFwBDtuVjeI/AAAAAAAABZA/HWDzK_paALY/w72-h72-p-k-no-nu/tortacappuccino.jpg

      HTTP Response

      200
    • 142.250.200.33:80
      http://2.bp.blogspot.com/-V1Ec6Q27OJg/UFgQdhMJshI/AAAAAAAABQE/mRYY3qCzsBM/w72-h72-p-k-no-nu/piatto-pronto-tovaglia-giallo-paletta-per-dolci_dettaglio_ricette_slider_grande3.jpg
      http
      888 B
       5.2kB
       10
      7

      HTTP Request

      GET http://2.bp.blogspot.com/-V1Ec6Q27OJg/UFgQdhMJshI/AAAAAAAABQE/mRYY3qCzsBM/w72-h72-p-k-no-nu/piatto-pronto-tovaglia-giallo-paletta-per-dolci_dettaglio_ricette_slider_grande3.jpg

      HTTP Response

      200
    • 142.250.200.33:80
      http://2.bp.blogspot.com/-2tEB1tXzD0c/UIRbZXa69qI/AAAAAAAACgQ/zb6dWCYvimY/w72-h72-p-k-no-nu/torta-croccante-al-latte.jpg
      http
      878 B
       5.9kB
       11
      8

      HTTP Request

      GET http://2.bp.blogspot.com/-2tEB1tXzD0c/UIRbZXa69qI/AAAAAAAACgQ/zb6dWCYvimY/w72-h72-p-k-no-nu/torta-croccante-al-latte.jpg

      HTTP Response

      200
    • 31.11.34.110:80
      http://tools.net-parade.it/images/b180_verde.png
      http
      1.3kB
       648 B
       9
      5

      HTTP Request

      GET http://tools.net-parade.it/images/b180_verde.png

      HTTP Response

      301
    • 31.11.34.110:80
      tools.net-parade.it
      196 B
       144 B
       4
      3
    • 216.58.212.193:443
      lh5.googleusercontent.com
      tls
      1.3kB
       10.9kB
       20
      15
    • 216.58.212.193:443
      lh5.googleusercontent.com
      tls
      2.4kB
       19.5kB
       33
      27
    • 142.250.200.33:80
      http://4.bp.blogspot.com/-WB-cCPEmlaA/UL8OwEX808I/AAAAAAAAFTU/lNCTHMt4cU0/w72-h72-p-k-no-nu/tronchetto-di-natale-5.jpg
      http
      848 B
       4.0kB
       10
      6

      HTTP Request

      GET http://4.bp.blogspot.com/-WB-cCPEmlaA/UL8OwEX808I/AAAAAAAAFTU/lNCTHMt4cU0/w72-h72-p-k-no-nu/tronchetto-di-natale-5.jpg

      HTTP Response

      200
    • 142.250.200.33:80
      2.bp.blogspot.com
      334 B
       92 B
       7
      2
    • 192.0.72.30:80
      cresycaradonna.files.wordpress.com
      242 B
       132 B
       5
      3
    • 192.0.72.30:80
      http://cresycaradonna.files.wordpress.com/2011/09/tiramisu-fragole-ricetta-monoporzione.jpg
      http
      671 B
       634 B
       7
      5

      HTTP Request

      GET http://cresycaradonna.files.wordpress.com/2011/09/tiramisu-fragole-ricetta-monoporzione.jpg

      HTTP Response

      301
    • 31.11.34.110:443
      tools.net-parade.it
      tls
      4.2kB
       52.1kB
       50
      42
    • 192.0.72.30:443
      cresycaradonna.files.wordpress.com
      tls
      1.6kB
       6.2kB
       20
      14
    • 104.20.79.99:80
      http://s10.histats.com/js15.js
      http
      772 B
       5.8kB
       11
      8

      HTTP Request

      GET http://s10.histats.com/js15.js

      HTTP Response

      200
    • 104.20.79.99:80
      s10.histats.com
      334 B
       132 B
       7
      3
    • 109.70.240.130:80
      http://ocsp05.actalis.it/VA/AUTH-ROOT/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSw4x5v4bTlizjNRmTdkYSy7q0R9gQUUtiIOsifeGbtifN7OHCUyQICNtACEBJzd5ejFYht%2FrdsfmpaA1Q%3D
      http
      431 B
       2.6kB
       4
      4

      HTTP Request

      GET http://ocsp05.actalis.it/VA/AUTH-ROOT/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSw4x5v4bTlizjNRmTdkYSy7q0R9gQUUtiIOsifeGbtifN7OHCUyQICNtACEBJzd5ejFYht%2FrdsfmpaA1Q%3D

      HTTP Response

      200
    • 109.70.240.114:80
      http://ocsp06.actalis.it/VA/AUTHDV-G3/MFEwTzBNMEswSTAJBgUrDgMCGgUABBROJtlvaAzyepGCxfu9qEfsEKGHVgQUQoNtgHwJhGf9gFer8Sb1d8gignECEFmitek5pvL%2BbWFA3KogSzI%3D
      http
      621 B
       4.6kB
       8
      8

      HTTP Request

      GET http://ocsp06.actalis.it/VA/AUTHDV-G3/MFEwTzBNMEswSTAJBgUrDgMCGgUABBROJtlvaAzyepGCxfu9qEfsEKGHVgQUQoNtgHwJhGf9gFer8Sb1d8gignECEFmitek5pvL%2BbWFA3KogSzI%3D

      HTTP Response

      200
    • 149.56.240.27:443
      s4.histats.com
      tls
      838 B
       5.0kB
       12
      9
    • 149.56.240.27:443
      s4.histats.com
      tls
      1.5kB
       5.4kB
       14
      11
    • 163.70.147.23:445
      connect.facebook.net
      156 B
       3
    • 163.70.147.23:139
      connect.facebook.net
      156 B
       3
    • 104.20.79.99:443
      s10.histats.com
      tls
      2.0kB
       12.4kB
       26
      19
    • 172.217.16.226:443
      googleads.g.doubleclick.net
      tls
      1.2kB
       5.3kB
       16
      11
    • 172.217.16.226:443
      googleads.g.doubleclick.net
      tls
      1.2kB
       5.3kB
       16
      11
    • 157.240.221.35:443
      www.facebook.com
      tls
      1.5kB
       5.8kB
       20
      15
    • 172.217.16.226:443
      googleads.g.doubleclick.net
      156 B
       3
    • 172.217.16.226:443
      googleads.g.doubleclick.net
      tls
      5.4kB
       12.7kB
       41
      28
    • 142.250.180.1:443
      tpc.googlesyndication.com
      tls
      3.0kB
       19.0kB
       39
      32
    • 142.250.180.1:443
      tpc.googlesyndication.com
      tls
      1.2kB
       5.3kB
       16
      12
    • 142.250.200.4:443
      www.google.com
      tls
      1.5kB
       5.3kB
       19
      13
    • 142.250.200.4:443
      www.google.com
      tls
      2.2kB
       6.9kB
       25
      17
    • 172.217.16.226:443
      googleads.g.doubleclick.net
      tls
      1.2kB
       523 B
       12
      7
    • 149.56.240.27:443
      s4.histats.com
      tls
      850 B
       439 B
       9
      7
    • 149.56.240.27:443
      s4.histats.com
      tls
      1.2kB
       700 B
       11
      7
    • 204.79.197.200:443
      ieonline.microsoft.com
      tls
      2.9kB
       30.0kB
       37
      32
    • 204.79.197.200:443
      ieonline.microsoft.com
      tls
      1.5kB
       8.3kB
       16
      12
    • 204.79.197.200:443
      tse1.mm.bing.net
      tls
      1.5kB
       8.2kB
       16
      11
    • 204.79.197.200:443
      tse1.mm.bing.net
      tls
      14.9kB
       389.5kB
       295
      287
    • 204.79.197.200:443
      tse1.mm.bing.net
      tls
      1.4kB
       8.2kB
       15
      11
    • 204.79.197.200:443
      tse1.mm.bing.net
      tls
      1.5kB
       8.2kB
       16
      11
    • 204.79.197.200:443
      tse1.mm.bing.net
      tls
      1.5kB
       8.2kB
       16
      11
    • 8.8.8.8:53
      2.136.104.51.in-addr.arpa
      dns
      71 B
       157 B
       1
      1

      DNS Request

      2.136.104.51.in-addr.arpa

    • 8.8.8.8:53
      2.181.190.20.in-addr.arpa
      dns
      142 B
       157 B
       2
      1

      DNS Request

      2.181.190.20.in-addr.arpa

      DNS Request

      2.181.190.20.in-addr.arpa

    • 8.8.8.8:53
      www.blogger.com
      dns
      61 B
       108 B
       1
      1

      DNS Request

      www.blogger.com

      DNS Response

      216.58.212.201

    • 8.8.8.8:53
      1.bp.blogspot.com
      dns
      63 B
       124 B
       1
      1

      DNS Request

      1.bp.blogspot.com

      DNS Response

      142.250.200.33

    • 8.8.8.8:53
      resources.blogblog.com
      dns
      68 B
       115 B
       1
      1

      DNS Request

      resources.blogblog.com

      DNS Response

      216.58.212.201

    • 8.8.8.8:53
      3.bp.blogspot.com
      dns
      63 B
       124 B
       1
      1

      DNS Request

      3.bp.blogspot.com

      DNS Response

      142.250.200.33

    • 8.8.8.8:53
      lh5.googleusercontent.com
      dns
      142 B
       116 B
       2
      1

      DNS Request

      lh5.googleusercontent.com

      DNS Request

      lh5.googleusercontent.com

      DNS Response

      216.58.212.193

    • 8.8.8.8:53
      4.bp.blogspot.com
      dns
      126 B
       124 B
       2
      1

      DNS Request

      4.bp.blogspot.com

      DNS Request

      4.bp.blogspot.com

      DNS Response

      142.250.200.33

    • 8.8.8.8:53
      lh4.googleusercontent.com
      dns
      71 B
       116 B
       1
      1

      DNS Request

      lh4.googleusercontent.com

      DNS Response

      216.58.212.193

    • 8.8.8.8:53
      2.bp.blogspot.com
      dns
      63 B
       124 B
       1
      1

      DNS Request

      2.bp.blogspot.com

      DNS Response

      142.250.200.33

    • 8.8.8.8:53
      cresycaradonna.files.wordpress.com
      dns
      160 B
       129 B
       2
      1

      DNS Request

      cresycaradonna.files.wordpress.com

      DNS Request

      cresycaradonna.files.wordpress.com

      DNS Response

      192.0.72.30
      192.0.72.31

    • 8.8.8.8:53
      tools.net-parade.it
      dns
      65 B
       81 B
       1
      1

      DNS Request

      tools.net-parade.it

      DNS Response

      31.11.34.110

    • 8.8.8.8:53
      95.221.229.192.in-addr.arpa
      dns
      73 B
       144 B
       1
      1

      DNS Request

      95.221.229.192.in-addr.arpa

    • 8.8.8.8:53
      33.200.250.142.in-addr.arpa
      dns
      73 B
       111 B
       1
      1

      DNS Request

      33.200.250.142.in-addr.arpa

    • 8.8.8.8:53
      201.212.58.216.in-addr.arpa
      dns
      73 B
       171 B
       1
      1

      DNS Request

      201.212.58.216.in-addr.arpa

    • 8.8.8.8:53
      2.180.250.142.in-addr.arpa
      dns
      72 B
       110 B
       1
      1

      DNS Request

      2.180.250.142.in-addr.arpa

    • 8.8.8.8:53
      110.34.11.31.in-addr.arpa
      dns
      71 B
       104 B
       1
      1

      DNS Request

      110.34.11.31.in-addr.arpa

    • 8.8.8.8:53
      193.212.58.216.in-addr.arpa
      dns
      73 B
       171 B
       1
      1

      DNS Request

      193.212.58.216.in-addr.arpa

    • 8.8.8.8:53
      3.200.250.142.in-addr.arpa
      dns
      144 B
       110 B
       2
      1

      DNS Request

      3.200.250.142.in-addr.arpa

      DNS Request

      3.200.250.142.in-addr.arpa

    • 8.8.8.8:53
      241.154.82.20.in-addr.arpa
      dns
      72 B
       158 B
       1
      1

      DNS Request

      241.154.82.20.in-addr.arpa

    • 8.8.8.8:53
      55.36.223.20.in-addr.arpa
      dns
      71 B
       157 B
       1
      1

      DNS Request

      55.36.223.20.in-addr.arpa

    • 8.8.8.8:53
      30.72.0.192.in-addr.arpa
      dns
      70 B
       135 B
       1
      1

      DNS Request

      30.72.0.192.in-addr.arpa

    • 8.8.8.8:53
      233.38.18.104.in-addr.arpa
      dns
      72 B
       134 B
       1
      1

      DNS Request

      233.38.18.104.in-addr.arpa

    • 8.8.8.8:53
      s10.histats.com
      dns
      61 B
       141 B
       1
      1

      DNS Request

      s10.histats.com

      DNS Response

      104.20.79.99
      104.20.80.99

    • 8.8.8.8:53
      ocsp05.actalis.it
      dns
      63 B
       98 B
       1
      1

      DNS Request

      ocsp05.actalis.it

      DNS Response

      109.70.240.130

    • 8.8.8.8:53
      www.vedovineri.it
      dns
      126 B
       118 B
       2
      1

      DNS Request

      www.vedovineri.it

      DNS Request

      www.vedovineri.it

    • 8.8.8.8:53
      fbcdn-sphotos-b-a.akamaihd.net
      dns
      76 B
       194 B
       1
      1

      DNS Request

      fbcdn-sphotos-b-a.akamaihd.net

    • 8.8.8.8:53
      sphotos-b.ak.fbcdn.net
      dns
      68 B
       125 B
       1
      1

      DNS Request

      sphotos-b.ak.fbcdn.net

    • 8.8.8.8:53
      ocsp06.actalis.it
      dns
      63 B
       79 B
       1
      1

      DNS Request

      ocsp06.actalis.it

      DNS Response

      109.70.240.114

    • 8.8.8.8:53
      130.240.70.109.in-addr.arpa
      dns
      73 B
       101 B
       1
      1

      DNS Request

      130.240.70.109.in-addr.arpa

    • 8.8.8.8:53
      s4.histats.com
      dns
      60 B
       268 B
       1
      1

      DNS Request

      s4.histats.com

      DNS Response

      149.56.240.27
      149.56.240.131
      54.39.128.117
      149.56.240.129
      54.39.156.32
      149.56.240.127
      149.56.240.130
      54.39.128.162
      142.4.219.198
      149.56.240.128
      149.56.240.31
      158.69.254.144
      149.56.240.132

    • 8.8.8.8:53
      connect.facebook.net
      dns
      132 B
       114 B
       2
      1

      DNS Request

      connect.facebook.net

      DNS Request

      connect.facebook.net

      DNS Response

      163.70.147.23

    • 8.8.8.8:53
      99.79.20.104.in-addr.arpa
      dns
      142 B
       133 B
       2
      1

      DNS Request

      99.79.20.104.in-addr.arpa

      DNS Request

      99.79.20.104.in-addr.arpa

    • 8.8.8.8:53
      27.240.56.149.in-addr.arpa
      dns
      144 B
       224 B
       2
      2

      DNS Request

      27.240.56.149.in-addr.arpa

      DNS Request

      27.240.56.149.in-addr.arpa

    • 8.8.8.8:53
      114.240.70.109.in-addr.arpa
      dns
      146 B
       202 B
       2
      2

      DNS Request

      114.240.70.109.in-addr.arpa

      DNS Request

      114.240.70.109.in-addr.arpa

    • 8.8.8.8:53
      40.13.222.173.in-addr.arpa
      dns
      144 B
       137 B
       2
      1

      DNS Request

      40.13.222.173.in-addr.arpa

      DNS Request

      40.13.222.173.in-addr.arpa

    • 8.8.8.8:53
      193.179.17.96.in-addr.arpa
      dns
      144 B
       137 B
       2
      1

      DNS Request

      193.179.17.96.in-addr.arpa

      DNS Request

      193.179.17.96.in-addr.arpa

    • 8.8.8.8:53
      connect.facebook.net
      dns
      132 B
       228 B
       2
      2

      DNS Request

      connect.facebook.net

      DNS Request

      connect.facebook.net

      DNS Response

      163.70.147.23

      DNS Response

      163.70.147.23

    • 8.8.8.8:53
      9.228.82.20.in-addr.arpa
      dns
      140 B
       156 B
       2
      1

      DNS Request

      9.228.82.20.in-addr.arpa

      DNS Request

      9.228.82.20.in-addr.arpa

    • 8.8.8.8:53
      googleads.g.doubleclick.net
      dns
      146 B
       89 B
       2
      1

      DNS Request

      googleads.g.doubleclick.net

      DNS Request

      googleads.g.doubleclick.net

      DNS Response

      172.217.16.226

    • 8.8.8.8:53
      animacucina.altervista.org
      dns
      144 B
       123 B
       2
      1

      DNS Request

      animacucina.altervista.org

      DNS Request

      animacucina.altervista.org

    • 8.8.8.8:53
      www.facebook.com
      dns
      62 B
       107 B
       1
      1

      DNS Request

      www.facebook.com

      DNS Response

      157.240.221.35

    • 8.8.8.8:53
      226.16.217.172.in-addr.arpa
      dns
      146 B
       140 B
       2
      1

      DNS Request

      226.16.217.172.in-addr.arpa

      DNS Request

      226.16.217.172.in-addr.arpa

    • 8.8.8.8:53
      35.221.240.157.in-addr.arpa
      dns
      146 B
       126 B
       2
      1

      DNS Request

      35.221.240.157.in-addr.arpa

      DNS Request

      35.221.240.157.in-addr.arpa

    • 8.8.8.8:53
      tpc.googlesyndication.com
      dns
      142 B
       87 B
       2
      1

      DNS Request

      tpc.googlesyndication.com

      DNS Request

      tpc.googlesyndication.com

      DNS Response

      142.250.180.1

    • 8.8.8.8:53
      www.google.com
      dns
      120 B
       76 B
       2
      1

      DNS Request

      www.google.com

      DNS Request

      www.google.com

      DNS Response

      142.250.200.4

    • 8.8.8.8:53
      1.180.250.142.in-addr.arpa
      dns
      144 B
       110 B
       2
      1

      DNS Request

      1.180.250.142.in-addr.arpa

      DNS Request

      1.180.250.142.in-addr.arpa

    • 8.8.8.8:53
      15.164.165.52.in-addr.arpa
      dns
      144 B
       146 B
       2
      1

      DNS Request

      15.164.165.52.in-addr.arpa

      DNS Request

      15.164.165.52.in-addr.arpa

    • 8.8.8.8:53
      4.200.250.142.in-addr.arpa
      dns
      144 B
       110 B
       2
      1

      DNS Request

      4.200.250.142.in-addr.arpa

      DNS Request

      4.200.250.142.in-addr.arpa

    • 8.8.8.8:53
      161.19.199.152.in-addr.arpa
      dns
      146 B
       144 B
       2
      1

      DNS Request

      161.19.199.152.in-addr.arpa

      DNS Request

      161.19.199.152.in-addr.arpa

    • 8.8.8.8:53
      18.134.221.88.in-addr.arpa
      dns
      288 B
       137 B
       4
      1

      DNS Request

      18.134.221.88.in-addr.arpa

      DNS Request

      18.134.221.88.in-addr.arpa

      DNS Request

      18.134.221.88.in-addr.arpa

      DNS Request

      18.134.221.88.in-addr.arpa

    • 8.8.8.8:53
      173.178.17.96.in-addr.arpa
      dns
      144 B
       137 B
       2
      1

      DNS Request

      173.178.17.96.in-addr.arpa

      DNS Request

      173.178.17.96.in-addr.arpa

    • 8.8.8.8:53
      200.197.79.204.in-addr.arpa
      dns
      146 B
       212 B
       2
      2

      DNS Request

      200.197.79.204.in-addr.arpa

      DNS Request

      200.197.79.204.in-addr.arpa

    • 8.8.8.8:53
      104.241.123.92.in-addr.arpa
      dns
      146 B
       278 B
       2
      2

      DNS Request

      104.241.123.92.in-addr.arpa

      DNS Request

      104.241.123.92.in-addr.arpa

    • 8.8.8.8:53
      119.110.54.20.in-addr.arpa
      dns
      144 B
       316 B
       2
      2

      DNS Request

      119.110.54.20.in-addr.arpa

      DNS Request

      119.110.54.20.in-addr.arpa

    • 8.8.8.8:53
      tse1.mm.bing.net
      dns
      124 B
       346 B
       2
      2

      DNS Request

      tse1.mm.bing.net

      DNS Request

      tse1.mm.bing.net

      DNS Response

      204.79.197.200
      13.107.21.200

      DNS Response

      204.79.197.200
      13.107.21.200

    • 8.8.8.8:53
      217.135.221.88.in-addr.arpa
      dns
      146 B
       278 B
       2
      2

      DNS Request

      217.135.221.88.in-addr.arpa

      DNS Request

      217.135.221.88.in-addr.arpa

    • 8.8.8.8:53
      176.178.17.96.in-addr.arpa
      dns
      144 B
       137 B
       2
      1

      DNS Request

      176.178.17.96.in-addr.arpa

      DNS Request

      176.178.17.96.in-addr.arpa

    MITRE ATT&CK Enterprise v15

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    We care about your privacy.

    This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.