Report - cert.home4four.com/v2/click/z7592v757y6nsfpw55f?main_url=aHR0cHM6Ly9jZXJ0LmhvbWU0Zm91ci5jb20vdjIvY2xpY2svejc1OTJ2NzU3eTZuc2ZwdzU1Zg==

Report Overview

Submitted URL
cert.home4four.com/v2/click/z7592v757y6nsfpw55f?main_url=aHR0cHM6Ly9jZXJ0LmhvbWU0Zm91ci5jb20vdjIvY2xpY2svejc1OTJ2NzU3eTZuc2ZwdzU1Zg==
IP
192.46.236.54
ASN
#63949 Linode, LLC
Submitted
2023-05-22 06:43:16
Access
public
Website Title
Final URL
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
2

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
cert.home4four.com	539611	2010-12-17	2019-05-19	2023-05-22	589 B	958 B	192.46.236.54
landing.offerteperte.net	unknown	unknown	2019-04-16	2023-04-17	5.9 kB	21 kB	178.255.74.101
ocsp.pki.goog	175	2016-06-13	2018-07-01	2023-05-22	1.3 kB	2.8 kB	142.250.74.131
fonts.googleapis.com	8877	2005-01-25	2013-06-10	2023-05-22	964 B	7.0 kB	142.250.74.106
fonts.gstatic.com	unknown	2008-02-11	2014-09-09	2023-05-22	1.6 kB	46 kB	216.58.207.227
imgstore.ediscom.it	unknown	unknown	2012-10-24	2023-04-03	1.3 kB	6.9 kB	178.255.74.104
g0t.eu	unknown	unknown	2020-11-02	2023-04-12	514 B	3.6 kB	178.255.74.172

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

Scan Date	Severity	Indicator	Alert
2023-05-22	medium	g0t.eu/e7/cookie

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (2)

	URL	Size	First Seen	Last Seen
	landing.offerteperte.net/__INCLUDE/v3/script/js/showOnMobile.min.js	315 B	2023-03-13	2023-05-22
Pretty URL landing.offerteperte.net/__INCLUDE/v3/script/js/showOnMobile.min.js IP 178.255.74.135 ASN #20746 Telecom Italia Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-13 20:38:52 Last Seen2023-05-22 08:43:16 Times Seen3 Hash 5193458e6ab21b96003b32c6a8dc4327 8b5ce35c2d2d855a847c5365994766940a6ce2d9 b161fb04652876b6133d2383c70c44b481a05e17f270786bbc4181a8543d34ec Loading...

	imgstore.ediscom.it/_ediscom-footer/js/app.js	3.3 kB	2023-05-22	2023-05-28
Pretty URL imgstore.ediscom.it/_ediscom-footer/js/app.js IP 178.255.74.104 ASN #20746 Telecom Italia Introduced by scriptElement Embedded in HTML false Observations First Seen2023-05-22 08:43:16 Last Seen2023-05-28 19:59:23 Times Seen4 Hash 7b0350322ba82c6d894f2d95e1f0d626 6f2347087b4d8ea058459861b0a8af36181cd211 50eee3f52e009d42fbeb83609e5b22bdd324f01728b610014fdd0d5a869df951 Loading...

HTTP Transactions (24)

URL IP Response Size

cert.home4four.com/v2/click/z7592v757y6nsfpw55f?main_url=aHR0cHM6Ly9jZXJ0LmhvbWU0Zm91ci5jb20vdjIvY2xpY2svejc1OTJ2NzU3eTZuc2ZwdzU1Zg==

192.46.236.54

20 B

URL
cert.home4four.com/v2/click/z7592v757y6nsfpw55f?main_url=aHR0cHM6Ly9jZXJ0LmhvbWU0Zm91ci5jb20vdjIvY2xpY2svejc1OTJ2NzU3eTZuc2ZwdzU1Zg==
IP
192.46.236.54:0
ASN
#63949 Linode, LLC

File type
gzip compressed data, from Unix\012- data
Size
20 B (20 bytes)
Hash
7029066c27ac6f5ef18d660d5741979a
46c6643f07aa7f6bfe7118de926b86defc5087c4
59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2

HTTP Headers

GET /v2/click/z7592v757y6nsfpw55f?main_url=aHR0cHM6Ly9jZXJ0LmhvbWU0Zm91ci5jb20vdjIvY2xpY2svejc1OTJ2NzU3eTZuc2ZwdzU1Zg== HTTP/1.1
Host: cert.home4four.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: openresty
date: Mon, 22 May 2023 06:42:33 GMT
content-type: text/html; charset=UTF-8
content-length: 20
x-powered-by: PHP/7.4.28
set-cookie: tr[z7592v757y6nsfpw55f]=1; expires=Mon, 22-May-2023 07:42:58 GMT; Max-Age=3600; path=/; secure; SameSite=None
track[326]=z7592v757y6nsfpw55fC126322408; expires=Tue, 23-May-2023 06:42:58 GMT; Max-Age=86400; path=/; secure; SameSite=None
track[0]=z7592v757y6nsfpw55fC126322408; expires=Tue, 23-May-2023 06:42:58 GMT; Max-Age=86400; path=/; secure; SameSite=None
p3p: policyref="http://cert.home4four.com/w3c/p3p.xml", CP="NOI DSP COR CURa ADMa DEVa OUR NOR UNI COM NAV INT";
refresh: 0; URL=https://landing.offerteperte.net/compass/trova-finanziamenti/a/?main_url=aHR0cHM6Ly9jZXJ0LmhvbWU0Zm91ci5jb20vdjIvY2xpY2svejc1OTJ2NzU3eTZuc2ZwdzU1Zg%3D%3D
content-encoding: gzip
vary: Accept-Encoding
x-robots-tag: noindex
x-served-by: cert.home4four.com
X-Firefox-Spdy: h2

landing.offerteperte.net/compass/trova-finanziamenti/a/?main_url=aHR0cHM6Ly9jZXJ0LmhvbWU0Zm91ci5jb20vdjIvY2xpY2svejc1OTJ2NzU3eTZuc2ZwdzU1Zg%3D%3D

178.255.74.101

200 OK

1.4 kB

URL User Request GET HTTP/1.1
landing.offerteperte.net/compass/trova-finanziamenti/a/?main_url=aHR0cHM6Ly9jZXJ0LmhvbWU0Zm91ci5jb20vdjIvY2xpY2svejc1OTJ2NzU3eTZuc2ZwdzU1Zg%3D%3D
IP
178.255.74.101:443
ASN
#20746 Telecom Italia

Certificate
IssuerLet's Encrypt
Subjectlanding.offerteperte.net
Fingerprint38:0E:C8:8D:B5:BF:E8:06:05:71:CB:F9:A7:DD:E9:DD:07:2B:D8:70
ValidityMon, 17 Apr 2023 04:16:31 GMT - Sun, 16 Jul 2023 04:16:30 GMT

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (370)
Size
1.4 kB (1368 bytes)
Hash
2e14afdec7bdfdab7889a6f5309aab6f
243053824256a885ea64f282d879089d1e97ca48
6e09905fb05f3ec432ec84bdb1620989706e7460132fbfb8e0da99e991739ed1

HTTP Headers

GET /compass/trova-finanziamenti/a/?main_url=aHR0cHM6Ly9jZXJ0LmhvbWU0Zm91ci5jb20vdjIvY2xpY2svejc1OTJ2NzU3eTZuc2ZwdzU1Zg%3D%3D HTTP/1.1
Host: landing.offerteperte.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Mon, 22 May 2023 06:42:59 GMT
Server: Apache
X-Powered-By: PHP/5.4.13
Access-Control-Allow-Origin: https://www.offerteperte.net
Vary: User-Agent,Accept-Encoding
Content-Encoding: gzip
Content-Length: 1368
Keep-Alive: timeout=2
Connection: Keep-Alive
Content-Type: text/html

landing.offerteperte.net/compass/trova-finanziamenti/css/lp/style.css

178.255.74.101

200 OK

2.6 kB

URL GET HTTP/1.1
landing.offerteperte.net/compass/trova-finanziamenti/css/lp/style.css
IP
178.255.74.101:443
ASN
#20746 Telecom Italia

Requested by
https://landing.offerteperte.net/compass/trova-finanziamenti/a/?main_url=aHR0cHM6Ly9jZXJ0LmhvbWU0Zm91ci5jb20vdjIvY2xpY2svejc1OTJ2NzU3eTZuc2ZwdzU1Zg%3D%3D
Certificate
IssuerLet's Encrypt
Subjectlanding.offerteperte.net
Fingerprint38:0E:C8:8D:B5:BF:E8:06:05:71:CB:F9:A7:DD:E9:DD:07:2B:D8:70
ValidityMon, 17 Apr 2023 04:16:31 GMT - Sun, 16 Jul 2023 04:16:30 GMT

File type
ASCII text, with very long lines (2553)
Size
2.6 kB (2554 bytes)
Hash
c51554305e8a086414202e94318b9fee
1228713a3f95e2e76b4c9b8209393176f6f916eb
60bdb1a3823476f9ad23660eb3f4a64c895e1ac1be6f82ba9f2f63d63c860463

HTTP Headers

GET /compass/trova-finanziamenti/css/lp/style.css HTTP/1.1
Host: landing.offerteperte.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://landing.offerteperte.net/compass/trova-finanziamenti/a/?main_url=aHR0cHM6Ly9jZXJ0LmhvbWU0Zm91ci5jb20vdjIvY2xpY2svejc1OTJ2NzU3eTZuc2ZwdzU1Zg%3D%3D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Mon, 22 May 2023 06:42:59 GMT
Server: Apache
Last-Modified: Thu, 04 May 2023 13:53:54 GMT
ETag: "af83f34-9fa-5fade80caa080"
Accept-Ranges: bytes
Content-Length: 2554
Access-Control-Allow-Origin: https://www.offerteperte.net
Keep-Alive: timeout=2
Connection: Keep-Alive
Content-Type: text/css

ocsp.pki.goog/gts1c3

142.250.74.131

472 B

URL
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
8d1ffc63ece540992319c6f7637db168
b84a5580317750f11fea9fb0ca41710c88e66d38
905441c3ec5505f8196be1b4c4123cd1862bc6f03ce2bc5cf5fe37b21e07c907

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 22 May 2023 06:43:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

landing.offerteperte.net/__INCLUDE/v3/script/js/showOnMobile.min.js

178.255.74.135

200 OK

315 B

URL GET HTTP/1.1
landing.offerteperte.net/__INCLUDE/v3/script/js/showOnMobile.min.js
IP
178.255.74.135:443
ASN
#20746 Telecom Italia

Requested by
https://landing.offerteperte.net/compass/trova-finanziamenti/a/?main_url=aHR0cHM6Ly9jZXJ0LmhvbWU0Zm91ci5jb20vdjIvY2xpY2svejc1OTJ2NzU3eTZuc2ZwdzU1Zg%3D%3D
Certificate
IssuerLet's Encrypt
Subjectlanding.offerteperte.net
Fingerprint38:0E:C8:8D:B5:BF:E8:06:05:71:CB:F9:A7:DD:E9:DD:07:2B:D8:70
ValidityMon, 17 Apr 2023 04:16:31 GMT - Sun, 16 Jul 2023 04:16:30 GMT

File type
ASCII text, with very long lines (315), with no line terminators
Size
315 B (315 bytes)
Hash
5193458e6ab21b96003b32c6a8dc4327
8b5ce35c2d2d855a847c5365994766940a6ce2d9
b161fb04652876b6133d2383c70c44b481a05e17f270786bbc4181a8543d34ec

HTTP Headers

GET /__INCLUDE/v3/script/js/showOnMobile.min.js HTTP/1.1
Host: landing.offerteperte.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://landing.offerteperte.net/compass/trova-finanziamenti/a/?main_url=aHR0cHM6Ly9jZXJ0LmhvbWU0Zm91ci5jb20vdjIvY2xpY2svejc1OTJ2NzU3eTZuc2ZwdzU1Zg%3D%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Mon, 22 May 2023 06:42:59 GMT
Server: Apache
Last-Modified: Thu, 22 Dec 2022 08:57:56 GMT
ETag: "a1e253e-13b-5f066dd702d00"
Accept-Ranges: bytes
Content-Length: 315
Access-Control-Allow-Origin: https://www.offerteperte.net
Keep-Alive: timeout=2
Connection: Keep-Alive
Content-Type: application/javascript

landing.offerteperte.net/__INCLUDE/v3/foot-html/rotateDevice/stylesheets/css/style.css

178.255.74.135

200 OK

1.8 kB

URL GET HTTP/1.1
landing.offerteperte.net/__INCLUDE/v3/foot-html/rotateDevice/stylesheets/css/style.css
IP
178.255.74.135:443
ASN
#20746 Telecom Italia

Requested by
https://landing.offerteperte.net/compass/trova-finanziamenti/a/?main_url=aHR0cHM6Ly9jZXJ0LmhvbWU0Zm91ci5jb20vdjIvY2xpY2svejc1OTJ2NzU3eTZuc2ZwdzU1Zg%3D%3D
Certificate
IssuerLet's Encrypt
Subjectlanding.offerteperte.net
Fingerprint38:0E:C8:8D:B5:BF:E8:06:05:71:CB:F9:A7:DD:E9:DD:07:2B:D8:70
ValidityMon, 17 Apr 2023 04:16:31 GMT - Sun, 16 Jul 2023 04:16:30 GMT

File type
ASCII text, with very long lines (1830)
Size
1.8 kB (1831 bytes)
Hash
7d4396836a23aae23be948fdb097bc9f
2dc49584dc8d8da5def705753c19c68b5641c85e
927def5ee418b4a33bf012e1907448a0dd5aee29ce00a23d9ff322e4b72c3d94

HTTP Headers

GET /__INCLUDE/v3/foot-html/rotateDevice/stylesheets/css/style.css HTTP/1.1
Host: landing.offerteperte.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://landing.offerteperte.net/compass/trova-finanziamenti/a/?main_url=aHR0cHM6Ly9jZXJ0LmhvbWU0Zm91ci5jb20vdjIvY2xpY2svejc1OTJ2NzU3eTZuc2ZwdzU1Zg%3D%3D
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Mon, 22 May 2023 06:42:59 GMT
Server: Apache
Last-Modified: Tue, 02 May 2023 12:17:01 GMT
ETag: "c362362-727-5fab4eaa08940"
Accept-Ranges: bytes
Content-Length: 1831
Access-Control-Allow-Origin: https://www.offerteperte.net
Keep-Alive: timeout=2
Connection: Keep-Alive
Content-Type: text/css

fonts.googleapis.com/css2?family=Roboto:ital,wght@0,700;1,400&family=Titillium+Web:wght@700&display=swap

142.250.74.106

200 OK

1.2 kB

URL GET HTTP/2
fonts.googleapis.com/css2?family=Roboto:ital,wght@0,700;1,400&family=Titillium+Web:wght@700&display=swap
IP
142.250.74.106:443
ASN
#15169 GOOGLE

Requested by
https://landing.offerteperte.net/compass/trova-finanziamenti/a/?main_url=aHR0cHM6Ly9jZXJ0LmhvbWU0Zm91ci5jb20vdjIvY2xpY2svejc1OTJ2NzU3eTZuc2ZwdzU1Zg%3D%3D
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint9B:D0:53:C4:55:9D:41:A4:94:03:4A:2B:6A:5B:57:EB:EB:A5:F0:4A
ValidityMon, 24 Apr 2023 12:00:43 GMT - Mon, 17 Jul 2023 12:00:42 GMT

File type
gzip compressed data, max compression\012- data
Size
1.2 kB (1199 bytes)
Hash
75a8ff963f46910a191da9ffd9768e0f
a3037e24e48868fa831a4080e5e07c060bf6afb3
de576582f630c27c711c621bc7fe837afc55dd28399511d42565054b9920e25f

HTTP Headers

GET /css2?family=Roboto:ital,wght@0,700;1,400&family=Titillium+Web:wght@700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://landing.offerteperte.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Mon, 22 May 2023 06:43:00 GMT
date: Mon, 22 May 2023 06:43:00 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

landing.offerteperte.net/compass/trova-finanziamenti/img/quinto.svg

178.255.74.135

200 OK

2.9 kB

URL GET HTTP/1.1
landing.offerteperte.net/compass/trova-finanziamenti/img/quinto.svg
IP
178.255.74.135:443
ASN
#20746 Telecom Italia

Requested by
https://landing.offerteperte.net/compass/trova-finanziamenti/a/?main_url=aHR0cHM6Ly9jZXJ0LmhvbWU0Zm91ci5jb20vdjIvY2xpY2svejc1OTJ2NzU3eTZuc2ZwdzU1Zg%3D%3D
Certificate
IssuerLet's Encrypt
Subjectlanding.offerteperte.net
Fingerprint38:0E:C8:8D:B5:BF:E8:06:05:71:CB:F9:A7:DD:E9:DD:07:2B:D8:70
ValidityMon, 17 Apr 2023 04:16:31 GMT - Sun, 16 Jul 2023 04:16:30 GMT

File type
SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (2882), with no line terminators
Size
2.9 kB (2882 bytes)
Hash
3374f75bf2f662c88e8b9a65d5fc6751
71f9c31d6ea26f9384a6592ad3d7b8cc77bb7ea4
c043c83f49042894523a2bec0c6b8060fef86b641bbc7709ce936c2eeca8a147

HTTP Headers

GET /compass/trova-finanziamenti/img/quinto.svg HTTP/1.1
Host: landing.offerteperte.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://landing.offerteperte.net/compass/trova-finanziamenti/a/?main_url=aHR0cHM6Ly9jZXJ0LmhvbWU0Zm91ci5jb20vdjIvY2xpY2svejc1OTJ2NzU3eTZuc2ZwdzU1Zg%3D%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Mon, 22 May 2023 06:42:59 GMT
Server: Apache
Last-Modified: Thu, 27 Apr 2023 14:25:08 GMT
ETag: "afc2c2f-b42-5fa521f99f900"
Accept-Ranges: bytes
Content-Length: 2882
Access-Control-Allow-Origin: https://www.offerteperte.net
Keep-Alive: timeout=2
Connection: Keep-Alive
Content-Type: image/svg+xml

landing.offerteperte.net/compass/trova-finanziamenti/img/logo.png

178.255.74.135

200 OK

1.5 kB

URL GET HTTP/1.1
landing.offerteperte.net/compass/trova-finanziamenti/img/logo.png
IP
178.255.74.135:443
ASN
#20746 Telecom Italia

Requested by
https://landing.offerteperte.net/compass/trova-finanziamenti/a/?main_url=aHR0cHM6Ly9jZXJ0LmhvbWU0Zm91ci5jb20vdjIvY2xpY2svejc1OTJ2NzU3eTZuc2ZwdzU1Zg%3D%3D
Certificate
IssuerLet's Encrypt
Subjectlanding.offerteperte.net
Fingerprint38:0E:C8:8D:B5:BF:E8:06:05:71:CB:F9:A7:DD:E9:DD:07:2B:D8:70
ValidityMon, 17 Apr 2023 04:16:31 GMT - Sun, 16 Jul 2023 04:16:30 GMT

File type
PNG image data, 242 x 36, 8-bit colormap, non-interlaced\012- data
Size
1.5 kB (1465 bytes)
Hash
c75696d494c18567caa6bdac6db49a1d
c1b562de4d3ad46dead48a6bf287a0cdc7843c44
9789bba6706cdd537dd02e37b15d100fb4096fb4cd31f22eada9753871f16525

HTTP Headers

GET /compass/trova-finanziamenti/img/logo.png HTTP/1.1
Host: landing.offerteperte.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://landing.offerteperte.net/compass/trova-finanziamenti/a/?main_url=aHR0cHM6Ly9jZXJ0LmhvbWU0Zm91ci5jb20vdjIvY2xpY2svejc1OTJ2NzU3eTZuc2ZwdzU1Zg%3D%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Mon, 22 May 2023 06:42:59 GMT
Server: Apache
Last-Modified: Thu, 27 Apr 2023 12:28:46 GMT
ETag: "afc2c2c-5b9-5fa507f711b80"
Accept-Ranges: bytes
Content-Length: 1465
Access-Control-Allow-Origin: https://www.offerteperte.net
Keep-Alive: timeout=2
Connection: Keep-Alive
Content-Type: image/png

landing.offerteperte.net/compass/trova-finanziamenti/img/carta.svg

178.255.74.135

200 OK

2.3 kB

URL GET HTTP/1.1
landing.offerteperte.net/compass/trova-finanziamenti/img/carta.svg
IP
178.255.74.135:443
ASN
#20746 Telecom Italia

Requested by
https://landing.offerteperte.net/compass/trova-finanziamenti/a/?main_url=aHR0cHM6Ly9jZXJ0LmhvbWU0Zm91ci5jb20vdjIvY2xpY2svejc1OTJ2NzU3eTZuc2ZwdzU1Zg%3D%3D
Certificate
IssuerLet's Encrypt
Subjectlanding.offerteperte.net
Fingerprint38:0E:C8:8D:B5:BF:E8:06:05:71:CB:F9:A7:DD:E9:DD:07:2B:D8:70
ValidityMon, 17 Apr 2023 04:16:31 GMT - Sun, 16 Jul 2023 04:16:30 GMT

File type
SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (2304), with no line terminators
Size
2.3 kB (2304 bytes)
Hash
2370175ce871b1ad025bcab1ea98fa31
9c28320893fc95dd041f9bf5e138968d6369e8cc
5ad48a084f7c9f0f3221670b42de668c4acdd62b96c70b91733da3ecf046ff71

HTTP Headers

GET /compass/trova-finanziamenti/img/carta.svg HTTP/1.1
Host: landing.offerteperte.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://landing.offerteperte.net/compass/trova-finanziamenti/a/?main_url=aHR0cHM6Ly9jZXJ0LmhvbWU0Zm91ci5jb20vdjIvY2xpY2svejc1OTJ2NzU3eTZuc2ZwdzU1Zg%3D%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Mon, 22 May 2023 06:42:59 GMT
Server: Apache
Last-Modified: Thu, 27 Apr 2023 14:25:08 GMT
ETag: "afc0a45-900-5fa521f99f900"
Accept-Ranges: bytes
Content-Length: 2304
Access-Control-Allow-Origin: https://www.offerteperte.net
Keep-Alive: timeout=2
Connection: Keep-Alive
Content-Type: image/svg+xml

landing.offerteperte.net/compass/trova-finanziamenti/img/business.svg

178.255.74.101

200 OK

1.9 kB

URL GET HTTP/1.1
landing.offerteperte.net/compass/trova-finanziamenti/img/business.svg
IP
178.255.74.101:443
ASN
#20746 Telecom Italia

Requested by
https://landing.offerteperte.net/compass/trova-finanziamenti/a/?main_url=aHR0cHM6Ly9jZXJ0LmhvbWU0Zm91ci5jb20vdjIvY2xpY2svejc1OTJ2NzU3eTZuc2ZwdzU1Zg%3D%3D
Certificate
IssuerLet's Encrypt
Subjectlanding.offerteperte.net
Fingerprint38:0E:C8:8D:B5:BF:E8:06:05:71:CB:F9:A7:DD:E9:DD:07:2B:D8:70
ValidityMon, 17 Apr 2023 04:16:31 GMT - Sun, 16 Jul 2023 04:16:30 GMT

File type
SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1884), with no line terminators
Size
1.9 kB (1884 bytes)
Hash
47811a20bf76744df35d8d6cf17a7943
adfb82ecaecc88f986262003ffe335b8f193c5bc
9dc2aecc41a1b1c428f0f2131b3c76964d09066f17ef023481abce54b11b2b3c

HTTP Headers

GET /compass/trova-finanziamenti/img/business.svg HTTP/1.1
Host: landing.offerteperte.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://landing.offerteperte.net/compass/trova-finanziamenti/a/?main_url=aHR0cHM6Ly9jZXJ0LmhvbWU0Zm91ci5jb20vdjIvY2xpY2svejc1OTJ2NzU3eTZuc2ZwdzU1Zg%3D%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Mon, 22 May 2023 06:42:59 GMT
Server: Apache
Last-Modified: Thu, 27 Apr 2023 14:25:08 GMT
ETag: "afc048d-75c-5fa521f99f900"
Accept-Ranges: bytes
Content-Length: 1884
Access-Control-Allow-Origin: https://www.offerteperte.net
Keep-Alive: timeout=2
Connection: Keep-Alive
Content-Type: image/svg+xml

landing.offerteperte.net/compass/trova-finanziamenti/img/prestito.svg

178.255.74.135

200 OK

2.2 kB

URL GET HTTP/1.1
landing.offerteperte.net/compass/trova-finanziamenti/img/prestito.svg
IP
178.255.74.135:443
ASN
#20746 Telecom Italia

Requested by
https://landing.offerteperte.net/compass/trova-finanziamenti/a/?main_url=aHR0cHM6Ly9jZXJ0LmhvbWU0Zm91ci5jb20vdjIvY2xpY2svejc1OTJ2NzU3eTZuc2ZwdzU1Zg%3D%3D
Certificate
IssuerLet's Encrypt
Subjectlanding.offerteperte.net
Fingerprint38:0E:C8:8D:B5:BF:E8:06:05:71:CB:F9:A7:DD:E9:DD:07:2B:D8:70
ValidityMon, 17 Apr 2023 04:16:31 GMT - Sun, 16 Jul 2023 04:16:30 GMT

File type
SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (2244), with no line terminators
Size
2.2 kB (2244 bytes)
Hash
ebe4809ad496b80a3ed472702ec8e04d
d6cb3dd1f73c3590f314915b783acbe66eaf1616
d80a96690c52b1e2ffaac3febbd0bb0ac4ea4d93cdaa8f7f10037e0ee113ea82

HTTP Headers

GET /compass/trova-finanziamenti/img/prestito.svg HTTP/1.1
Host: landing.offerteperte.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://landing.offerteperte.net/compass/trova-finanziamenti/a/?main_url=aHR0cHM6Ly9jZXJ0LmhvbWU0Zm91ci5jb20vdjIvY2xpY2svejc1OTJ2NzU3eTZuc2ZwdzU1Zg%3D%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Mon, 22 May 2023 06:42:59 GMT
Server: Apache
Last-Modified: Thu, 27 Apr 2023 14:25:08 GMT
ETag: "afc2c2e-8c4-5fa521f99f900"
Accept-Ranges: bytes
Content-Length: 2244
Access-Control-Allow-Origin: https://www.offerteperte.net
Keep-Alive: timeout=2
Connection: Keep-Alive
Content-Type: image/svg+xml

ocsp.pki.goog/gts1c3

142.250.74.131

471 B

URL
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
d34f0af5cb22586cc436ab96da5df7cc
91c7686c859dd34556de215681e7124a8af7cb70
3e6027d2501218ce83cd136b33af94417d03c38330873e6d80570f00c6c0c8e8

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 22 May 2023 06:43:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ocsp.pki.goog/gts1c3

142.250.74.131

471 B

URL
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
8ab94d7259411fe8a216956474b19511
48c63eaff708604c5f7af9514c3e77109a1f3f73
1dfd960074784d17f2fab64fab44d8aa41c1a794a7000980b428f6ab6392439a

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 22 May 2023 06:43:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2

216.58.207.227

200 OK

16 kB

URL GET HTTP/2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://landing.offerteperte.net/compass/trova-finanziamenti/a/?main_url=aHR0cHM6Ly9jZXJ0LmhvbWU0Zm91ci5jb20vdjIvY2xpY2svejc1OTJ2NzU3eTZuc2ZwdzU1Zg%3D%3D
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE2:33:59:47:38:D7:4A:7A:9E:28:5D:EC:AA:94:7F:92:25:D2:B1:C4
ValidityMon, 24 Apr 2023 12:00:43 GMT - Mon, 17 Jul 2023 12:00:42 GMT

File type
Web Open Font Format (Version 2), TrueType, length 15860, version 1.0\012- data
Size
16 kB (15860 bytes)
Hash
e9f5aaf547f165386cd313b995dddd8e
acdef5603c2387b0e5bffd744b679a24a8bc1968
f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860

HTTP Headers

GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://landing.offerteperte.net
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 20 May 2023 03:11:48 GMT
expires: Sun, 19 May 2024 03:11:48 GMT
cache-control: public, max-age=31536000
age: 185472
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.gstatic.com/s/titilliumweb/v15/NaPDcZTIAOhVxoMyOr9n_E7ffHjDGItzYw.woff2

216.58.207.227

200 OK

12 kB

URL GET HTTP/2
fonts.gstatic.com/s/titilliumweb/v15/NaPDcZTIAOhVxoMyOr9n_E7ffHjDGItzYw.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://landing.offerteperte.net/compass/trova-finanziamenti/a/?main_url=aHR0cHM6Ly9jZXJ0LmhvbWU0Zm91ci5jb20vdjIvY2xpY2svejc1OTJ2NzU3eTZuc2ZwdzU1Zg%3D%3D
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE2:33:59:47:38:D7:4A:7A:9E:28:5D:EC:AA:94:7F:92:25:D2:B1:C4
ValidityMon, 24 Apr 2023 12:00:43 GMT - Mon, 17 Jul 2023 12:00:42 GMT

File type
Web Open Font Format (Version 2), TrueType, length 11796, version 1.0\012- data
Size
12 kB (11796 bytes)
Hash
8d4079c3aa4f01e6d9bbd4f1bbcdf114
52ab47c062d0bfdbd34dbd31784008bd0e4c4227
d5c1172f24f4f49f780c65cf5be897527fd08f3662a2ba8db0cfe0057d92e367

HTTP Headers

GET /s/titilliumweb/v15/NaPDcZTIAOhVxoMyOr9n_E7ffHjDGItzYw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://landing.offerteperte.net
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 11796
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 15 May 2023 21:49:08 GMT
expires: Tue, 14 May 2024 21:49:08 GMT
cache-control: public, max-age=31536000
age: 550432
last-modified: Wed, 27 Apr 2022 15:47:01 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.131

471 B

URL
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
8ab94d7259411fe8a216956474b19511
48c63eaff708604c5f7af9514c3e77109a1f3f73
1dfd960074784d17f2fab64fab44d8aa41c1a794a7000980b428f6ab6392439a

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 22 May 2023 06:43:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

imgstore.ediscom.it/_ediscom-footer/js/app.js

178.255.74.104

200 OK

3.3 kB

URL GET HTTP/1.1
imgstore.ediscom.it/_ediscom-footer/js/app.js
IP
178.255.74.104:443
ASN
#20746 Telecom Italia

Requested by
https://landing.offerteperte.net/compass/trova-finanziamenti/a/?main_url=aHR0cHM6Ly9jZXJ0LmhvbWU0Zm91ci5jb20vdjIvY2xpY2svejc1OTJ2NzU3eTZuc2ZwdzU1Zg%3D%3D
Certificate
IssuerLet's Encrypt
Subjectimgstore.ediscom.it
FingerprintAB:7D:66:53:41:C7:30:5E:0F:66:C4:C5:58:73:63:D8:0C:88:7A:E3
ValidityMon, 03 Apr 2023 04:08:56 GMT - Sun, 02 Jul 2023 04:08:55 GMT

File type
ASCII text, with very long lines (3284), with no line terminators
Size
3.3 kB (3284 bytes)
Hash
7b0350322ba82c6d894f2d95e1f0d626
6f2347087b4d8ea058459861b0a8af36181cd211
50eee3f52e009d42fbeb83609e5b22bdd324f01728b610014fdd0d5a869df951

HTTP Headers

GET /_ediscom-footer/js/app.js HTTP/1.1
Host: imgstore.ediscom.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://landing.offerteperte.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Mon, 22 May 2023 06:43:00 GMT
Server: Apache
X-Robots-Tag: noindex
Last-Modified: Thu, 11 May 2023 10:10:40 GMT
ETag: "1e16e7-cd4-5fb6833560800"
Accept-Ranges: bytes
Content-Length: 3284
Keep-Alive: timeout=2
Connection: Keep-Alive
Content-Type: application/javascript

imgstore.ediscom.it/_ediscom-footer/images/content/chiudi.svg

178.255.74.104

200 OK

298 B

URL GET HTTP/1.1
imgstore.ediscom.it/_ediscom-footer/images/content/chiudi.svg
IP
178.255.74.104:443
ASN
#20746 Telecom Italia

Requested by
https://landing.offerteperte.net/compass/trova-finanziamenti/a/?main_url=aHR0cHM6Ly9jZXJ0LmhvbWU0Zm91ci5jb20vdjIvY2xpY2svejc1OTJ2NzU3eTZuc2ZwdzU1Zg%3D%3D
Certificate
IssuerLet's Encrypt
Subjectimgstore.ediscom.it
FingerprintAB:7D:66:53:41:C7:30:5E:0F:66:C4:C5:58:73:63:D8:0C:88:7A:E3
ValidityMon, 03 Apr 2023 04:08:56 GMT - Sun, 02 Jul 2023 04:08:55 GMT

File type
SVG Scalable Vector Graphics image\012- , ASCII text, with no line terminators
Size
298 B (298 bytes)
Hash
8bab75f703719384d15b9d2d7d255352
170bb7588b710c5f71cd8890fc86f4df0e959607
9c525c6f713f4deb6ec13c2a5ee5d2c89dae1b68f69eaa18e42f58472bf1cde7

HTTP Headers

GET /_ediscom-footer/images/content/chiudi.svg HTTP/1.1
Host: imgstore.ediscom.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://landing.offerteperte.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Mon, 22 May 2023 06:43:00 GMT
Server: Apache
X-Robots-Tag: noindex
Last-Modified: Tue, 09 May 2023 09:16:34 GMT
ETag: "1e16e5-12a-5fb3f362d4080"
Accept-Ranges: bytes
Content-Length: 298
Keep-Alive: timeout=2
Connection: Keep-Alive
Content-Type: image/svg+xml

imgstore.ediscom.it/_ediscom-footer/css/app.css

178.255.74.104

200 OK

2.4 kB

URL GET HTTP/1.1
imgstore.ediscom.it/_ediscom-footer/css/app.css
IP
178.255.74.104:443
ASN
#20746 Telecom Italia

Requested by
https://landing.offerteperte.net/compass/trova-finanziamenti/a/?main_url=aHR0cHM6Ly9jZXJ0LmhvbWU0Zm91ci5jb20vdjIvY2xpY2svejc1OTJ2NzU3eTZuc2ZwdzU1Zg%3D%3D
Certificate
IssuerLet's Encrypt
Subjectimgstore.ediscom.it
FingerprintAB:7D:66:53:41:C7:30:5E:0F:66:C4:C5:58:73:63:D8:0C:88:7A:E3
ValidityMon, 03 Apr 2023 04:08:56 GMT - Sun, 02 Jul 2023 04:08:55 GMT

File type
ASCII text, with very long lines (2447), with no line terminators
Size
2.4 kB (2447 bytes)
Hash
5af4993fb1ed27f8dbeca48e4fe54e9b
c9c9431d1e723514eac43f8f173e498cf1ebf495
5173d304114b61147b391aad0c73e3d394a12dd04113b9822863c26c9261a6cb

HTTP Headers

GET /_ediscom-footer/css/app.css HTTP/1.1
Host: imgstore.ediscom.it
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://landing.offerteperte.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Mon, 22 May 2023 06:43:00 GMT
Server: Apache
X-Robots-Tag: noindex
Last-Modified: Tue, 20 Dec 2022 10:36:42 GMT
ETag: "1e16e2-98f-5f04002f90280"
Accept-Ranges: bytes
Content-Length: 2447
Keep-Alive: timeout=2
Connection: Keep-Alive
Content-Type: text/css

landing.offerteperte.net/favicon.ico

178.255.74.135

200 OK

1.2 kB

URL GET HTTP/1.1
landing.offerteperte.net/favicon.ico
IP
178.255.74.135:443
ASN
#20746 Telecom Italia

Requested by
https://landing.offerteperte.net/compass/trova-finanziamenti/a/?main_url=aHR0cHM6Ly9jZXJ0LmhvbWU0Zm91ci5jb20vdjIvY2xpY2svejc1OTJ2NzU3eTZuc2ZwdzU1Zg%3D%3D
Certificate
IssuerLet's Encrypt
Subjectlanding.offerteperte.net
Fingerprint38:0E:C8:8D:B5:BF:E8:06:05:71:CB:F9:A7:DD:E9:DD:07:2B:D8:70
ValidityMon, 17 Apr 2023 04:16:31 GMT - Sun, 16 Jul 2023 04:16:30 GMT

File type
MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Size
1.2 kB (1150 bytes)
Hash
0907c129d46ed23792b96f03a3cb5606
092cc971a5cf8d4307f2a9205314473b6038449a
655ff55b4978e19f8dee5d7dc99e884e3ca8cc93f6c02fe4874e8eff2696660e

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: landing.offerteperte.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://landing.offerteperte.net/compass/trova-finanziamenti/a/?main_url=aHR0cHM6Ly9jZXJ0LmhvbWU0Zm91ci5jb20vdjIvY2xpY2svejc1OTJ2NzU3eTZuc2ZwdzU1Zg%3D%3D
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Mon, 22 May 2023 06:43:00 GMT
Server: Apache
Last-Modified: Tue, 11 Oct 2022 15:21:33 GMT
ETag: "a1e2475-47e-5eac3d4c8b940"
Accept-Ranges: bytes
Content-Length: 1150
Access-Control-Allow-Origin: https://www.offerteperte.net
Keep-Alive: timeout=2
Connection: Keep-Alive
Content-Type: image/x-icon

fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2

216.58.207.227

200 OK

16 kB

URL GET HTTP/2
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://landing.offerteperte.net/compass/trova-finanziamenti/a/?main_url=aHR0cHM6Ly9jZXJ0LmhvbWU0Zm91ci5jb20vdjIvY2xpY2svejc1OTJ2NzU3eTZuc2ZwdzU1Zg%3D%3D
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE2:33:59:47:38:D7:4A:7A:9E:28:5D:EC:AA:94:7F:92:25:D2:B1:C4
ValidityMon, 24 Apr 2023 12:00:43 GMT - Mon, 17 Jul 2023 12:00:42 GMT

File type
Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Size
16 kB (15744 bytes)
Hash
15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615

HTTP Headers

GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://landing.offerteperte.net
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 20 May 2023 07:44:41 GMT
expires: Sun, 19 May 2024 07:44:41 GMT
cache-control: public, max-age=31536000
age: 169100
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

g0t.eu/e7/cookie

178.255.74.172

200 OK

3.3 kB

URL GET HTTP/1.1
g0t.eu/e7/cookie
IP
178.255.74.172:443
ASN
#20746 Telecom Italia

Requested by
https://landing.offerteperte.net/compass/trova-finanziamenti/a/?main_url=aHR0cHM6Ly9jZXJ0LmhvbWU0Zm91ci5jb20vdjIvY2xpY2svejc1OTJ2NzU3eTZuc2ZwdzU1Zg%3D%3D
Certificate
IssuerLet's Encrypt
Subjectg0t.eu
FingerprintED:35:C7:8D:0F:6D:40:8D:6D:2A:5D:2A:BA:99:99:49:ED:0F:3F:25
ValidityMon, 03 Apr 2023 04:08:09 GMT - Sun, 02 Jul 2023 04:08:08 GMT

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (8356)
Size
3.3 kB (3280 bytes)
Hash
6354e082f6fa49caebb60ab039fdbf66
167cbb6e5e31f4d0b4aeee78d561d9d3970facad
95a6d300024682358d98a2d10347fb1de1230728ca91946e820fada02428da73

Detections

Analyzer	Verdict	Alert
fortinet	Spam

HTTP Headers

GET /e7/cookie HTTP/1.1
Host: g0t.eu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://landing.offerteperte.net/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Mon, 22 May 2023 06:43:00 GMT
Server: Apache/2.4.53 (Unix) OpenSSL/1.1.1o PHP/7.4.28
X-Powered-By: PHP/7.4.28
Vary: Accept-Encoding
Content-Encoding: gzip
X-Robots-Tag: noindex
Content-Length: 3280
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html;charset=UTF-8

fonts.googleapis.com/css2?family=Roboto:wght@400;700&display=swap

142.250.74.106

200 OK

4.5 kB

URL GET HTTP/3
fonts.googleapis.com/css2?family=Roboto:wght@400;700&display=swap
IP
142.250.74.106:443
ASN
#15169 GOOGLE

Requested by
https://landing.offerteperte.net/compass/trova-finanziamenti/a/?main_url=aHR0cHM6Ly9jZXJ0LmhvbWU0Zm91ci5jb20vdjIvY2xpY2svejc1OTJ2NzU3eTZuc2ZwdzU1Zg%3D%3D
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint9B:D0:53:C4:55:9D:41:A4:94:03:4A:2B:6A:5B:57:EB:EB:A5:F0:4A
ValidityMon, 24 Apr 2023 12:00:43 GMT - Mon, 17 Jul 2023 12:00:42 GMT

File type
ASCII text, with very long lines (4666), with no line terminators
Size
4.5 kB (4540 bytes)
Hash
b4c850476ae7ff8f12a1e67768ae7b74
c368a4dbea00a114bd81817c01abea43a93a395e
b3eb7ab07b6ebf6e6a19fb13747e07cdbf840a7d3313307af68dbbee3015f2de

HTTP Headers

GET /css2?family=Roboto:wght@400;700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://imgstore.ediscom.it/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Mon, 22 May 2023 06:43:01 GMT
date: Mon, 22 May 2023 06:43:01 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (2)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (24)

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/1.1

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

Certificate

File type

Size

Hash