| 156.54.128.63/caltagirone/po/po_exlogin.php | 156.54.128.63 | 200 OK | 13 kB |
URL User Request GET HTTP/1.1156.54.128.63/caltagirone/po/po_exlogin.php IP156.54.128.63:80
File typeHTML document, ISO-8859 text, with very long lines (2221), with CRLF, LF line terminators Hash951df843486a4390439c994b58273a46 3f8fba0cf0a336fa210cca3069258cac1d1b6d58 c8a702d552356703c5559672c04162f6adbf7e3cd099f6cb830210d2aabf2077
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /caltagirone/po/po_exlogin.php HTTP/1.1
Host: 156.54.128.63
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 28 Mar 2024 11:42:38 GMT
Server: Apache/2.4.23 (Unix) OpenSSL/1.0.2k PHP/5.6.31
X-Powered-By: PHP/5.6.31
Set-Cookie: PHPSESSID=651a59a4b59e4f433478988b9a36f44c; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: public, s-maxage=3600
Pragma: no-cache
P3P: CP="NOI ADM DEV COM NAV OUR STP"
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=ISO-8859-1
|
|
| 156.54.128.63/caltagirone/km/bootstrap/bootstrap.halley.js | 156.54.128.63 | 200 OK | 2.0 kB |
URL GET HTTP/1.1156.54.128.63/caltagirone/km/bootstrap/bootstrap.halley.js IP156.54.128.63:80
Requested byhttp://156.54.128.63/caltagirone/po/po_exlogin.php
File typeJavaScript source, ISO-8859 text, with CRLF line terminators Hashce01f73247f78bee881e6b225d93045c bb28a3a896ace70b982aa67a229dc0f5870f2ba8 ca864c6eaf22b85efadf8e28f515afd369abf5222aa2484b77f95df5d2cdcacd
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /caltagirone/km/bootstrap/bootstrap.halley.js HTTP/1.1
Host: 156.54.128.63
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://156.54.128.63/caltagirone/po/po_exlogin.php
Cookie: PHPSESSID=651a59a4b59e4f433478988b9a36f44c
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 28 Mar 2024 11:42:39 GMT
Server: Apache/2.4.23 (Unix) OpenSSL/1.0.2k PHP/5.6.31
Last-Modified: Wed, 13 Jun 2018 07:10:18 GMT
ETag: "7f8-56e80acd40a80"
Accept-Ranges: bytes
Content-Length: 2040
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/javascript
|
|
| 156.54.128.63/caltagirone/km/bootstrap/js/bootstrap.min.js | 156.54.128.63 | 200 OK | 28 kB |
URL GET HTTP/1.1156.54.128.63/caltagirone/km/bootstrap/js/bootstrap.min.js IP156.54.128.63:80
Requested byhttp://156.54.128.63/caltagirone/po/po_exlogin.php
File typeJavaScript source, ASCII text, with very long lines (27605) Hash9e25e8e29ef0ea358e9778082ffd97d8 75a42212affc118fef849aba4b9326a7da2acda1 54d21b0676784d0c983bbd4093898770adefa932d89b72c8afd88183a19172a7
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /caltagirone/km/bootstrap/js/bootstrap.min.js HTTP/1.1
Host: 156.54.128.63
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://156.54.128.63/caltagirone/po/po_exlogin.php
Cookie: PHPSESSID=651a59a4b59e4f433478988b9a36f44c
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 28 Mar 2024 11:42:39 GMT
Server: Apache/2.4.23 (Unix) OpenSSL/1.0.2k PHP/5.6.31
Last-Modified: Wed, 30 Oct 2013 16:10:36 GMT
ETag: "6c4e-4e9f792cdd700"
Accept-Ranges: bytes
Content-Length: 27726
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/javascript
|
|
| 156.54.128.63/caltagirone/km/bootstrap/bootstrap-override.css | 156.54.128.63 | 200 OK | 2.4 kB |
URL GET HTTP/1.1156.54.128.63/caltagirone/km/bootstrap/bootstrap-override.css IP156.54.128.63:80
Requested byhttp://156.54.128.63/caltagirone/po/po_exlogin.php
File typeASCII text, with CRLF, LF line terminators Hash5a69931809a908e625cecab7034819f0 ae2d93eeacc2e557397de0a34fd1138c013e536b 1624e1a793778a7bee29e569e1a04d62006cdbbb9435ac3895fda13992295da4
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /caltagirone/km/bootstrap/bootstrap-override.css HTTP/1.1
Host: 156.54.128.63
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://156.54.128.63/caltagirone/po/po_exlogin.php
Cookie: PHPSESSID=651a59a4b59e4f433478988b9a36f44c
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 28 Mar 2024 11:42:39 GMT
Server: Apache/2.4.23 (Unix) OpenSSL/1.0.2k PHP/5.6.31
Last-Modified: Mon, 09 Apr 2018 15:36:37 GMT
ETag: "959-5696c2bdf6b40"
Accept-Ranges: bytes
Content-Length: 2393
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
|
|
| 156.54.128.63/caltagirone/km/css/accessibilita.php?nocache=1711626159 | 156.54.128.63 | 200 OK | 2 B |
URL GET HTTP/1.1156.54.128.63/caltagirone/km/css/accessibilita.php?nocache=1711626159 IP156.54.128.63:80
Requested byhttp://156.54.128.63/caltagirone/po/po_exlogin.php
File typeASCII text, with CRLF line terminators Hash81051bcc2cf1bedf378224b0a93e2877 ba8ab5a0280b953aa97435ff8946cbcbb2755a27 7eb70257593da06f682a3ddda54a9d260d4fc514f645237f5ca74b08f8da61a6
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /caltagirone/km/css/accessibilita.php?nocache=1711626159 HTTP/1.1
Host: 156.54.128.63
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://156.54.128.63/caltagirone/po/po_exlogin.php
Cookie: PHPSESSID=651a59a4b59e4f433478988b9a36f44c
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 28 Mar 2024 11:42:39 GMT
Server: Apache/2.4.23 (Unix) OpenSSL/1.0.2k PHP/5.6.31
X-Powered-By: PHP/5.6.31
Content-Length: 2
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css;charset=ISO-8859-1
|
|
| 156.54.128.63/caltagirone/km/bootstrap/css/bootstrap.min.css | 156.54.128.63 | 200 OK | 124 kB |
URL GET HTTP/1.1156.54.128.63/caltagirone/km/bootstrap/css/bootstrap.min.css IP156.54.128.63:80
Requested byhttp://156.54.128.63/caltagirone/po/po_exlogin.php
File typeASCII text, with very long lines (64996), with CRLF line terminators Size124 kB (123616 bytes) Hash8d396d67e48defcb4676b3539b27c2fd 1eca1b10fbb044e1c69a7170c877ea774c2c87d7 a56535187bb4bc141b26f2b468074e34864ee62ede6c7d7ac07828c6b7cecfc3
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /caltagirone/km/bootstrap/css/bootstrap.min.css HTTP/1.1
Host: 156.54.128.63
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://156.54.128.63/caltagirone/po/po_exlogin.php
Cookie: PHPSESSID=651a59a4b59e4f433478988b9a36f44c
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 28 Mar 2024 11:42:39 GMT
Server: Apache/2.4.23 (Unix) OpenSSL/1.0.2k PHP/5.6.31
Last-Modified: Fri, 17 Jul 2015 08:18:05 GMT
ETag: "1e2e0-51b0dd3c54940"
Accept-Ranges: bytes
Content-Length: 123616
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
|
|
| 156.54.128.63/caltagirone/km/scripts.js?041430&tm=1602849134 | 156.54.128.63 | 200 OK | 1.0 MB |
URL GET HTTP/1.1156.54.128.63/caltagirone/km/scripts.js?041430&tm=1602849134 IP156.54.128.63:80
Requested byhttp://156.54.128.63/caltagirone/po/po_exlogin.php
File typeISO-8859 text, with very long lines (361), with CRLF, LF line terminators Size1.0 MB (1040825 bytes) Hash5743353a7132c0aac8ffddec397bdaa9 44573968fddf6bdcc92b0f120eb2fb0ef7320a9e 927d06a3be8ff26cdfc5e94b82a441e0fa1bdb69249159e86f1dcd72b89240df
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /caltagirone/km/scripts.js?041430&tm=1602849134 HTTP/1.1
Host: 156.54.128.63
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://156.54.128.63/caltagirone/po/po_exlogin.php
Cookie: PHPSESSID=651a59a4b59e4f433478988b9a36f44c
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 28 Mar 2024 11:42:39 GMT
Server: Apache/2.4.23 (Unix) OpenSSL/1.0.2k PHP/5.6.31
Last-Modified: Fri, 16 Oct 2020 11:52:14 GMT
ETag: "fe1b9-5b1c86546f24e"
Accept-Ranges: bytes
Content-Length: 1040825
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: application/javascript
|
|
| 156.54.128.63/caltagirone/km/style.css?041430&tm=1602849135 | 156.54.128.63 | 200 OK | 188 kB |
URL GET HTTP/1.1156.54.128.63/caltagirone/km/style.css?041430&tm=1602849135 IP156.54.128.63:80
Requested byhttp://156.54.128.63/caltagirone/po/po_exlogin.php
File typeASCII text, with very long lines (23577), with CRLF, LF line terminators Size188 kB (187895 bytes) Hashcb00ae20dfa0f617f149516d47b304ff cb2e5fae4f7d16f3ca0c704c5d8b6930d873b866 077d0bf63cb3cf9ae17c99a5b6fbc03957398455a180ecb547306fec63882656
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /caltagirone/km/style.css?041430&tm=1602849135 HTTP/1.1
Host: 156.54.128.63
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://156.54.128.63/caltagirone/po/po_exlogin.php
Cookie: PHPSESSID=651a59a4b59e4f433478988b9a36f44c
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 28 Mar 2024 11:42:39 GMT
Server: Apache/2.4.23 (Unix) OpenSSL/1.0.2k PHP/5.6.31
Last-Modified: Fri, 16 Oct 2020 11:52:15 GMT
ETag: "2ddf7-5b1c865535e0b"
Accept-Ranges: bytes
Content-Length: 187895
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css
|
|
| 156.54.128.63/caltagirone/editor/CKeditor/ckeditor.js | 156.54.128.63 | 200 OK | 510 kB |
URL GET HTTP/1.1156.54.128.63/caltagirone/editor/CKeditor/ckeditor.js IP156.54.128.63:80
Requested byhttp://156.54.128.63/caltagirone/po/po_exlogin.php
File typeJavaScript source, Unicode text, UTF-8 (with BOM) text, with very long lines (594) Size510 kB (510243 bytes) Hash853e1d72f9f3524c6db3e20b7ea490ad 3a4d4cff33756a0f3c5d52cca7737b06896db276 85d5d0664b7a1ae0a33726ab3ea5e40d96189ad3ad7aecb3044454114e62fff9
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /caltagirone/editor/CKeditor/ckeditor.js HTTP/1.1
Host: 156.54.128.63
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://156.54.128.63/caltagirone/po/po_exlogin.php
Cookie: PHPSESSID=651a59a4b59e4f433478988b9a36f44c
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 28 Mar 2024 11:42:39 GMT
Server: Apache/2.4.23 (Unix) OpenSSL/1.0.2k PHP/5.6.31
Last-Modified: Mon, 21 Aug 2023 11:00:54 GMT
ETag: "7c923-6036ccacc4580"
Accept-Ranges: bytes
Content-Length: 510243
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: application/x-javascript
|
|
| 156.54.128.63/caltagirone/immagini/valid_css3.png | 156.54.128.63 | 200 OK | 802 B |
URL GET HTTP/1.1156.54.128.63/caltagirone/immagini/valid_css3.png IP156.54.128.63:80
Requested byhttp://156.54.128.63/caltagirone/po/po_exlogin.php
File typePNG image data, 80 x 15, 8-bit colormap, non-interlaced Hashd1139a81312c86715122c2052bc17f09 1fe8f55c41b3df6b1371ef27d447efc31caac9e7 cf01ec1b2bfd19c0361df4e42eb5c573cc7ba8ac65ee3e24b9dfb012140aa4a5
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /caltagirone/immagini/valid_css3.png HTTP/1.1
Host: 156.54.128.63
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://156.54.128.63/caltagirone/po/po_exlogin.php
Cookie: PHPSESSID=651a59a4b59e4f433478988b9a36f44c
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 28 Mar 2024 11:42:39 GMT
Server: Apache/2.4.23 (Unix) OpenSSL/1.0.2k PHP/5.6.31
Last-Modified: Fri, 09 Aug 2013 16:00:22 GMT
ETag: "322-4e385df383180"
Accept-Ranges: bytes
Content-Length: 802
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/png
|
|
| 156.54.128.63/caltagirone/immagini/sfondomenu.png | 156.54.128.63 | 200 OK | 4.1 kB |
URL GET HTTP/1.1156.54.128.63/caltagirone/immagini/sfondomenu.png IP156.54.128.63:80
Requested byhttp://156.54.128.63/caltagirone/po/po_exlogin.php
File typePNG image data, 240 x 518, 8-bit/color RGBA, non-interlaced Hash1da8f2bf973fed26a3e245a679d342cd a1420de4b0321743523c304aa6689c521aa15b49 dc22ef9c68a42437695787e5730c2ab0636312cf8fddfcf7b1bd0bae0293fd71
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /caltagirone/immagini/sfondomenu.png HTTP/1.1
Host: 156.54.128.63
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://156.54.128.63/caltagirone/po/po_exlogin.php
Cookie: PHPSESSID=651a59a4b59e4f433478988b9a36f44c
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 28 Mar 2024 11:42:39 GMT
Server: Apache/2.4.23 (Unix) OpenSSL/1.0.2k PHP/5.6.31
Last-Modified: Tue, 19 Oct 2010 07:06:24 GMT
ETag: "fdb-492f2ee43bc00"
Accept-Ranges: bytes
Content-Length: 4059
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/png
|
|
| 156.54.128.63/caltagirone/immagini/valid_html5.png | 156.54.128.63 | 200 OK | 984 B |
URL GET HTTP/1.1156.54.128.63/caltagirone/immagini/valid_html5.png IP156.54.128.63:80
Requested byhttp://156.54.128.63/caltagirone/po/po_exlogin.php
File typePNG image data, 80 x 15, 8-bit/color RGBA, non-interlaced Hash337c3a6861c29095b81843d2ca643a31 d33ddf9d79736f41aaf76ac486194710b4a71690 be3aa6a5984d4d3c784a6245e34c310f848006b61b11512394fdbf69685892ce
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /caltagirone/immagini/valid_html5.png HTTP/1.1
Host: 156.54.128.63
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://156.54.128.63/caltagirone/po/po_exlogin.php
Cookie: PHPSESSID=651a59a4b59e4f433478988b9a36f44c
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 28 Mar 2024 11:42:39 GMT
Server: Apache/2.4.23 (Unix) OpenSSL/1.0.2k PHP/5.6.31
Last-Modified: Fri, 09 Aug 2013 16:00:22 GMT
ETag: "3d8-4e385df383180"
Accept-Ranges: bytes
Content-Length: 984
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/png
|
|
| 156.54.128.63/caltagirone/km/css-static/print.css | 156.54.128.63 | 200 OK | 57 B |
URL GET HTTP/1.1156.54.128.63/caltagirone/km/css-static/print.css IP156.54.128.63:80
Requested byhttp://156.54.128.63/caltagirone/po/po_exlogin.php
File typeASCII text, with CRLF line terminators Hash1a595710445d9df1be00617e343e8703 86e5afeedf59745be4d6a7f8996d0da7d11bcf81 2bd714055a308be0c5cfa7bf0bb2e4a7936c754baafd08901776cd04ce8fa1fa
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /caltagirone/km/css-static/print.css HTTP/1.1
Host: 156.54.128.63
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://156.54.128.63/caltagirone/po/po_exlogin.php
Cookie: PHPSESSID=651a59a4b59e4f433478988b9a36f44c
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 28 Mar 2024 11:42:39 GMT
Server: Apache/2.4.23 (Unix) OpenSSL/1.0.2k PHP/5.6.31
Last-Modified: Mon, 27 Apr 2015 09:02:21 GMT
ETag: "39-514b100ef4140"
Accept-Ranges: bytes
Content-Length: 57
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/css
|
|
| 156.54.128.63/caltagirone/immagini/yellow_wai-aa.gif | 156.54.128.63 | 200 OK | 328 B |
URL GET HTTP/1.1156.54.128.63/caltagirone/immagini/yellow_wai-aa.gif IP156.54.128.63:80
Requested byhttp://156.54.128.63/caltagirone/po/po_exlogin.php
File typeGIF image data, version 89a, 80 x 15 Hash764bfa65307cd08b78baf3082a2128e4 98ad1fa2569bba0813b87c466f694acbb9c8425d 86455a6d9d1c9e84bc255d5e2c98675abb73e5b1e65ce82279b2258e8ef1fea1
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /caltagirone/immagini/yellow_wai-aa.gif HTTP/1.1
Host: 156.54.128.63
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://156.54.128.63/caltagirone/po/po_exlogin.php
Cookie: PHPSESSID=651a59a4b59e4f433478988b9a36f44c
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 28 Mar 2024 11:42:39 GMT
Server: Apache/2.4.23 (Unix) OpenSSL/1.0.2k PHP/5.6.31
Last-Modified: Thu, 30 Sep 2010 16:24:47 GMT
ETag: "148-4917c8436d1c0"
Accept-Ranges: bytes
Content-Length: 328
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/gif
|
|
| 156.54.128.63/km/css-static/font-awesome/fonts/fontawesome-webfont.woff?v=4.3 | 156.54.128.63 | 200 OK | 72 kB |
URL GET HTTP/1.1156.54.128.63/km/css-static/font-awesome/fonts/fontawesome-webfont.woff?v=4.3 IP156.54.128.63:80
Requested byhttp://156.54.128.63/caltagirone/po/po_exlogin.php
File typeWeb Open Font Format, TrueType, length 71508, version 1.0 Hashd9ee23d59d0e0e727b51368b458a0bff 56ce13e71c2150d81bc972940584915181bd6081 e3870de89716b72cb61a4bba0e17c75783b361cdaba35ea96961c3070bd8ca18
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /km/css-static/font-awesome/fonts/fontawesome-webfont.woff?v=4.3 HTTP/1.1
Host: 156.54.128.63
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: http://156.54.128.63/caltagirone/km/style.css?041430&tm=1602849135
Cookie: PHPSESSID=651a59a4b59e4f433478988b9a36f44c
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 28 Mar 2024 11:42:40 GMT
Server: Apache/2.4.23 (Unix) OpenSSL/1.0.2k PHP/5.6.31
Last-Modified: Wed, 15 Jul 2015 13:53:30 GMT
ETag: "11754-51aea47a1aa80"
Accept-Ranges: bytes
Content-Length: 71508
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: application/font-woff
|
|
| 156.54.128.63/favicon.png | 156.54.128.63 | 200 OK | 1.6 kB |
URL GET HTTP/1.1156.54.128.63/favicon.png IP156.54.128.63:80
Requested byhttp://156.54.128.63/caltagirone/po/po_exlogin.php
File typePNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced Hashd64de12f288e6a3405fc4d6740565bbb 014ba5af160f7b52f80aae8db41bc1c93b7a38e2 e40dc2abbb61458d486360247a35d79ff8efb4b3071ebeeba3962d1542cf37b2
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /favicon.png HTTP/1.1
Host: 156.54.128.63
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://156.54.128.63/caltagirone/po/po_exlogin.php
Cookie: PHPSESSID=651a59a4b59e4f433478988b9a36f44c
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 28 Mar 2024 11:42:40 GMT
Server: Apache/2.4.23 (Unix) OpenSSL/1.0.2k PHP/5.6.31
Last-Modified: Tue, 20 May 2014 10:33:14 GMT
ETag: "64e-4f9d2683b2e80"
Accept-Ranges: bytes
Content-Length: 1614
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: image/png
|
|